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PREFACE 


A 'taste for cryptographic studies seems to be repealed among u® since 
some years &g©» cryptography is taught today in our military schools„ popular 
magazine® outline the elements of it, and new systems are- proposed ire the maga¬ 
zines' to- the Minister for War. 

If the efforts made by different people to give-our army a- cipher both 
safe and practical are worthy of praise- and testify to perfectly justified con¬ 
cern-, it is no less true that, with hardly one or two cexeeptions, they show in 
their authors are incomplete'knowledge" of previous works as well- as of different 
decrypting procedures <> 

1 haw therefore thought that it would be rendering a service to the 
persons who are interested in the future of military cryptography to summarize 
fox them the work® already published on the question, and to indicate to them 
the principles which must guide- them ire the creation or valuation of every 
cipher destined to war serviceo 

The present work will be equally useful to officers who might be 
called upon to -apply 6 at a given moment, some method of cryptographic corres¬ 
pondence^ because it is only after being initiated into decrypting procedure® 
that, they will be able to avoid certain imprudences which jeopardize the se¬ 
curity of the best systems■«■- 

Paris, 1883o Auguste Kerckhoffs 


CRYPTOGRAPHS IN THE ARMYc 
Ao Historical Review. 


or the fort of ciphering , is a science as old as the 


worlds confused at first with military telegraphy, it has been cultivated, 
since the greatest antiquity, by the Chinese, the Persian®, the Garthagi- 
i° g it was taught in the tactical schools of Greece, and held 


From the modest scytale of the Lacedemonians and the v 'tricks" in- 

, up to the famous drum of 


Kessler (3), men of war have invented many procedures for transmitting se¬ 
cret orders‘over a distance, or for protecting their instructions from in¬ 
vestigation or surprise by the enemy. 

We possess, however, only very incomplete facts about cryptographic 
processes, properly speaking, in use among the ancients^ aside from the 
mentari.es of Aeneas, one finds on the subject that occupies us, only iso 
passage® in Polybius (4), Plutarch (s), Dion Cassius (SL Suetonius (7), 
Aulus Gellius (s), Isidore (9), and Julius Africanus (10K 

(IT Kerckhofs footnotes will be found at the end of this translation. 


com- 



During the Middle Ages , cryptography was scarcely cultivated except 
by monks and cabalists, and yet, where it did serve any practical-purpose, 
the inventors sought to give a false scent as to the meaning of the communi¬ 
cations transmitted, rather than to develop a more or less indecipherable 
method of correspondence? the fact is, that in those times of distrustful 
ignorance, it was just as dangerous to correspond in- a mysterious or inde¬ 
cipherable language as to write in the clear the- most compromising secrets. 

Even in the 17th century, the simple fact' of having corresponded in 
secret characters- was still considered as an aggravating circumstance by the 
English courts? thus, in the famous suit against the Count of Somerset, for 
the crime of poisoning^ Chancellor Bacon pointed out, as a grave charge against 
the accused noble, his habit of writing to his friends in ciphero 

It was, then, steganography that our ancestors practised, artificjum 
sine secret! latentis suspicion® scribendl , rather than cryptography, in the 
meaning that we attach to this word today. One can read in the works of the 
Jesuit Schott (11) and in an old treatise on cryptography toy the Duke of 
Brunswick (12), the thousand artifices that they successively invented. It 
is not until after the Renaissance that cryptography becomes a true art, ars 
occulte scribendl „ as they used to day, and acquires a certain importance in 
the correspondence of princes with their ambassadors, and in the relations 
of great-lords with their confidential, agents. 

It has been seen by his letters addressed to the Landgrave of Hesse, 
published some years ago by de Rommal, that Henry IV loved to make use of a 
cipher for his intimate correspondence. 

It is equally well known that Henry IV, having intercepted some en¬ 
ciphered letters addressed by members of the League to the Spanish government, 
engaged the mathematician Viet® to find the key to them. The latter succeeded, 
and the king was thus able, for almost two years, to keep an eye on his ene¬ 
mies 9 intrigueso 

Under Richelieu, the art of deciphering secret writings was raised 
almost to the height of a State science? according to Field Marshal Beausobre 

(13) ; th© minister of foreign affais even had an academy where it was taught 

(14) 0 Supported by the largesse of the rulers, encouraged by the absence of 
the .political integrity that characterizes following reigns, the art of deci¬ 
phering continued, .until the July revolution, to be cultivated with equal 
success by spies of the court and by the men of the black chamber«. 

I have not, however, been able to find clear traces of the employment 
of cryptographic correspondence in the army in the 16ih century^ but it is 
known, .positively that, since the 17th century, orders are not sent to generals 
commanding frontiers or in enemy country, except by ciphers (X5)o 

In the accounts of the wars of the first Empire, it is often a ques¬ 
tion of cryptographic communication? the generals had two ciphers for corres— 
.pondene® with each other and with the general staff® the "great cipher” and 
the ’’little” or ’’ordinary cipher." Baron Fain, the secretary of Napoleon I, 
reports that during the war with Russia the Emperor maintained correspondence 
in cipher (16). It is equally known that, during the war with^Spain, a^Span¬ 
iard found a means of stealing the cipher of Suehet, and used it to facilitate 
Ms countrymen 0 s recapture of Mequinenza and Lerida. 

Today, correspondence by secret cipher® is used in all the armies of 
Europe? but it is still not applied in a systematic fashion except in the 
offices of the chancelleries. 



Bo The Status of the Problem. 


The Gerroans state as a principle that cryptographic correspondence 
should be employed most widely? the programs of their military schools pre¬ 
scribe not only instruction of officers in the composition and reading of 
secret dispatches, but also their introduction to all the theoretical prin¬ 
ciples of the art of decrypting. 

Article 32 of the regulation of January 19, 1874 also states that 
military dispatches should whenever possible be enciphered. 

Therefore, one might be astonished at first that, with rare excep¬ 
tions , the use of enciphered correspondence should still be limited today, 
in the French army, to the commanders-in-chiefo But a system of crypto¬ 
graphy "of easy and safe use is a desideratum," says General Lewal, "that 
has always existed in our array” (17) 0 The former commander of the War col¬ 
lege adds, it is true, that there exist plenty of processes with that pur¬ 
pose, and that it would be sufficient to adopt one of them "that was port¬ 
able and whose use was at the same time within the comprehension of every¬ 
one"? but would not certain deceptions suffered by the general staff in our 
recent campaign in Tunisia, as well as the methods taught and extolled in om 
high military schools, make one suppose that there exists a singular analogy 
between this " easy and safe system" and the philosophers 9 stone of the 
ancient alchemists? 

The best generals are well aware, today, that it is indispensable 
that the different commanders of an army should have at their disposal a 
system of secret communication in order to correspond freely, not only 
among themselves and with their commander-in-chief, but also with their 
lieutenants? so, the tactician whom I have just quoted thinks that "it 
would be necessary to supply a cipher in time of peace as well as in war, 
to the generals, the regiment and service chiefs, all the column and post 
commanders„ w He even adds, and rightly, that it would be necessary, during 
peacetime, to train officers in the handling of this correspondence. 

"It is a matter to be foreseen and arranged before the war,” he says? 
"once operations have begun, it is too late to dream about it. Be- 
sides, even in peace one needs, at any moment, to correspond secretly." 


One reads in the Recherches histori{^s_§u£_ll art_militaire by 
General Bardin (18)® that the use of ciphers came to an end in the confla¬ 
gration of 1814, and that when Napoleon wanted to reunite with the main 
body of the army all the garrisons in foreign parts and several large French 
garrisons, it was in pure and clear French that Feltre and Berthier expe¬ 
dited his orders? also, few dispatches reached their destination, the enemy 
got hold of most of them, "Perhaps,” says Bardin, "the fate of Franc© and 
the face of Europe were brought about by the failure to use cryptography*" 
But it is not enough to have a cipher for secret correspondence, it 
is also necessary that it present serious guarantees of indecipherability? 
nowr this is the weak part of the majority of the systems invented up to 
the nr©sent time, and where this capital defect has been overcome, one finds 
himself in the presence of practical inconveniences just as seriouso 

Even in the Ministry for War they have not appeared very happy up to 



now in the choice or composition of cipher. It is no secret to anyone that 
during the Turc-o-Russian war an enciphered dispatch was received, one Sunday, 
from one of the military attaches who were following the operations of the 
armies in combat, which could not be deciphered due to the absence of the 
head of the office in charge of cryptographic correspondence. The Minister 
decided that, since he did not know the key, h® could only ask one of the 
officers on the staff to try to decipher it without £ kej§ at the end of a 
few hours the cryptogram was solved’ Luckily for the secrecy of the corres¬ 
pondence, the able decipherer was the son of the Minister himself (19)o 

It has been possible to see, in the obituary articles published in 
1879 in the German journals, on the occasion of the death of Captain Max 
Hering, who discovered the cable of the Seine in 1870, what services were 
rendered to the besiegers by the absence of a safe system of secret corres¬ 
pondence between the army in Paris and the generals in the provinces„ 

I do not know what one is supposed to think of the assertions of the 
journalists from across the Rhine? but when I see competent judges declare 
that cryptography is a ’’powerful auxiliary of military tactics,” and when 1 
thkmk that the destinies of a country, the fate of a city or army, might some 
time depend on the greater or lesser indecipherability of a cryptogram, I am 
stupefied to see our scholars and our professors teach and recommend for war¬ 
time use systems of which an ever so inexperienced decrypter would certainly 
find the key in less than an hour’s time. 

One can hardly explain this excess of confidence in certain ciphers 
except by the abandon into which cryptographic studies have been allowed to 
fall because of the suppression of black chambers and the security of the 
postal relations? it can also be believed that the wild assertions of certain 
authors, no less than the complete absence of any serious work on the art of 
decrypting secret writings, have contributed largely to giving currency to 
the most erroneous ideas about the value of our cryptographic systems„ 

Thus it is that General Lswal. affirms categorically in his Etudes 
da guerre (20) that double key substitution ciphers are MVtfttdflblfi» t or 
least that they can only be decrypted with extra ordinary difiisulix- And 
does not Voltaire himself say in an article devoted to cipher writing, and 
that at a time when the art of deciphering was at its peak, that ’’those 
who boast of deciphering a letter without knowing anything of the matter 
it concerns, and without having any preliminary help, are greater charlatans 
than those who would boast about understanding a language they had not 
learnedo” (2l)o 

In the preface of GontrVespron (22), in which "citizen” Dlandol 
mgHft known, in 1793, the keys of some ciphers used the royalists in their 
correspondence with the emigres, it is said that "destroying by publicity 
the most dangerous weapon of the secret enemies of the Republic in the circum¬ 
stances existing at that time was not one of the least services to be ren¬ 
dered to the countryo” In my turn, I believe I am not acting like a bad 
citizen in exposing to the light of day a state of affairs which, although 
it arises from a different point of view, is basically the same, and which 
our foreign enemies some day might only too well and too easily turn to 
accounto 

In the pages that follow, I shall examine first the desiderata for 
any system of military cryptography? then I shall say a few words about the 
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different ciphers? I shall next indicate a new process of decrypting appli¬ 
cable to the most usual systems of double key substitutions? I shall end with 
some considerations on cipher dictionaries and cryptographic machines (23K 


He 

DESIDERATA OF MILITARY CRYPTOGRAPHY* 


It is necessary to distinguish well between a cipher system created 
for an occasional exchange of letters among a few individuals, and a crypto¬ 
graphic method destined to govern for an unlimited time the correspondence 
between different, array chiefs* The latter, in fact, cannot, at well and at 
a given moment, modify their rules? besides, they must never keep upon their 
persons any object or writing that could reveal to the enemy the meaning of 
any secret dispatches that might fall into their hands* 

A great number of ingenious contrivances can answer the purpose that 
one wishes to achieve in the first case? in the second, a system is necessary 
which fulfills certain exceptional conditions, conditions that I shall sum¬ 
marize under the following six headings? 

1„ The system must be practically, if not mathematically, indecipherable* 

2 0 It is necessary that it not demand secrecy, and that it may without 
inconvenience fall into enemy hands a 

3. The key must be able to be communicated and remembered without the 
help of written notes, and to be changed or modified at the will of 
the correspondents* 

4* It must be applicable to telegraphic correspondence* 

5* It must be portable, and its handling and operation must not require 
the presence of several persons* 

Bo Finally, it is necessary, in view of the circumstances governing its 
operation, that the system be easy to use, not demanding intense 
mental effort nor the knowledge of a long series of rules to be 
observed* 

Everyone agrees that the last three requirements are justifies, but 

there is no such agreement on the first three* 

Thus it is that some responsible persons claim that absolute inde¬ 
cipherability of the cipher could not be considered as a sine gua non con¬ 
dition of its admission into the service of the army? that enciphered in¬ 
structions sent in time of war have only a momentary importance, and do not 
require secrecy beyond three or four hours following the moment at which they 
were given? that it therefore matters little that the meaning of a secret 
dispatch should be known to the enemy a few hours after its interception? 
that it is sufficient, in a word, that the system be composed in such a way 
that the decryptment of a message will demand at least three or four hours 


(23) Bibliographical information is given only for the benefit of those who 
might like to probe more deeply into the question? it will be found all 
the more useful since, with two or three exceptions, the works cited 
are all to be found in the Bibliothlque Nationals* 



wx They add, moreover, that the possibility of changing the key at will 

takes away all importance from the defect of non-indecipherabrlity. 

This argument, at first sight, seems quite just} at bottom, 1 believe 

it to be falseo 

In my ©pinion, it ignores the fact that the secret matter in communi¬ 
cations sent over a distance very often remains important beyond the day on 
which they were transmitted? without ©numerating all the contingencies that 
may arise, it well suffice for me to cite the case of the commander of a be¬ 
sieged city who sends information to the army that is supposed to relieve it. 
Besides, once an intercepted message has been decrypted, every new dispatan, 
written with the same key and suffering the same fate, can be.read instantly. 
It will happen, consequently, that over a more or less long time, dispatches 
will be sent off in all directions, and their deeryptment will be found, m 
a way, to have been done beforehands unless we admit that in an army corps 
all enciphered instructions come from, or at least pass through the hands of, 

which would be to reduce secret correspondence to a singu- 


The possibility of being able to change the key at will is certainly 
an essential condition of any system of cryptography, but it is a deceptive 
advantage, and one would be wrong to count on the practical application of it 
during the thousand and one turns of fortune in a long.campaign- 

In regard to the necessity for secrecy, which, in my opinion, consti¬ 
tutes the principal defect of all our systems of cryptography, 1 wish to 
point out that it restricts in some way the use of enciphered corresponding® 
to only commanders in chief- And here I -understand by secrecy, not the key 
properly so-called, but that which constitutes the material part of the sys¬ 
tems tableaux, code books, or whatever mechanical apparatus may bfc necessary 
for its application- In fact, it is not necessary to raise imaginary phan¬ 
toms and to cast suspicion on the incorruptibility of employees or subordi¬ 
nate agents, in order to understand that, if a system requiring secrecy were 
found in the hands of too large a number of individuals, it could be jeopar¬ 
dized in any engagement in which one or another of them took part- * rom 
this point of view alone, there would be .reason to condemn the employment of 

code books, which are in use today in the aimyo 

Someone may perhaps object to my including the second desideratum, 
since it is hardly possible to establish a completely indecipherable system., 

It must be understood? I know very well that to try to find, imdertnese 
conditions, a mathematica lly indecipherable system is something mathematically 
impossible, but I affirm., and not without good reasons, that while bringing 
about the realization of the different desiderata that I have enumerated above, 

it. is perfectly possible to compose systems chat ox©, if not. » 


^ seems that they are giving serious consideration, in the Ministry 
for War, to the replacement of the cipher dictionary by some other more prac¬ 
tical svstem. Well, then- If the Administration wishes to turn to account 
all the* services that a well constructed system of cryptographic correspondence 
can render, it must absolutely renounce secret methods and establish as a 
policy that, it will only accept a process that can be taught m bread day-ight 
in our military schools, that our students will be free to communicate to 
anyone they please, and that our neighbors can even copy and adopt if it t 
suitable to them. I will say more? it will only be when our officers have 
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, + v,p nrincinles of cryptography and learned the art of decrypting, 

they Will be in a position to avlid the numerous blunders that endanger 
the key If the best ciphers, and to which the ordinary ones are necessarily 
expose!;Inly then will that article of the regulation of 19 November 874, 
which I mentioned above, be able to receive a practical and really 
factory application. 


III. 


THE DIFFERENT METHODS OF CRYPTOGRAPHY. 


The different systems of secret writing can be divided into three 
principal^methods: ^ ^ ^ # traRsposition of the plaintext, 

That which has the composition of the cipher based on a change m the 

That^hich^epresents lylllbles, words or even whole sentences by 
means of numbers or groups of letters^!). 


2 . 


3- 


A. Transposition Method. 

The systems based on a transposition of letters are very ancient; 

they permit numerous variations and have served as the basis ^ (a) 

devices, such as the grilles, which still enjoy xne ia , of the 

u prfl is an example of elementary transposition. The letters or rne 

that constitutes the key of the cipher^). 

«Une attaque simul4e aura lieu demain matin a quatre heures." 


A: 


1 

2 

3 

4 
• 5 


123456789 10 11 

uneattaque s 
imuleeaura 1 
ieudemainm a 
tinaquatre h 
euresabade f 


B: 


11 9853 10 1764 


n s 
m 1 
e a 
i h 
u f 


u q t e e 
r u e u a 
n i e u m 
r t q n e 
d c s r e 


u a t a 
i a e 1 
i a ra d 
t a u a 
e b a e 


= nsuqteeuatamlrueuaiaeleani eumiamdihr tqnetauaufdc s r eebae. 
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If the decrypter is in doubt about the process that has been adopted, 
and he sees immediately the letter E, which in this case appears the most 
freauently, the decipherment is only a matter of trial and error. It is suf 
fioient to count first of all the number of letters in the cryptogram andto 
break them down into two factors (55 = 5 x ll) } the one represents the nunber 
of horizontal lines and the other that of the vertical columns. The mere 
presence of a g or an x, the first always being followed and the other gene- 
rally preceded ^.^trays^secret^f the^ey. ^ 

journals made known the secret cipher used by the accused: itj^asystemof 
double transposition; the letters, after having been once transposed by veI 
tical columns, are transposed again by horizontal lines. The same word s r 
as a key for the two transpositions (5) ; for this purpose, it is transformed 
into a numerical formula, by placing an Arabic number at each-^ter usi g 
them in such a way that the value of the number corresponds to the positio 

of the letters in the alphabet (6). . 

Here is the procedure applied to the word Schuvalow. 

achlosuvw_schuvalow 
123456789 = 623781459 

If it were now a question of transposing a sentence, like this one: 
”Vous ates invite ^ vous trouver ce soir, a onze heures precises, au local 
habituel de nos reunions," one would proceed at first as in the 
case, then one would perform the same operation with the horizontal li - 


A: 


123456789 


1 
2 

3 

4 

5 

6 

7 

8 u 

9 Q 


u n 


e 
e 
u 
r 
r 
e 
h 

den 

ion 


t 

a 

v 

a 

e 

s 

a 


s i 
o u 
r c 
n z 
P r 
u 1 
i t 
s r 
x x 


623781459 

6sciauesel 

2 avivonteu 

3 vtrersouc 

7acabiolht 
8nelosude,r 
l touesvse i 
4asooneipz 
Sehespeupp 
9nunsxeiox 


= sciaueselavivonteuvtrersoucacabiolhtnelosuder k etc 


However complicated this 
ment of a cryptogram written in 


transposition might appear to us, the decrypt- 
this system could never present insurmountable 
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So seem to have brought their work to a successful conclusron in a rela 
tively ^^tlme. pt3 # ^ oomplicated syst em, it ceases to be practical 

without be-mingjhereby bas^of th<^ 

S5-2?i S"nL““ “=f 

Colonel Fleissner seem to have rendered ^ ’ is a square metal 

The figure below represents an ancient moaei. u * 

write, in the places left open, the that side B C takes the place 

then turn the instrument from right to 1 , and you turn the plate 

of side AB; you write the nine letters t ' * You will have 

again to continue the ^e operation up ^/“^Thave indicated 
the following cryptogram, in which for greater oiar y, 

with capitals the initial letters of the words. 
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s euunserimmaauatillnteiameeaatquiduen. 

The grille of Colonel Fleissner (neue Patron en-Gehejmsc h rift) is the 
fruit of long and patient research, and it has infinite variations; but, be¬ 
sides some practical inconveniences, it cannot, in my opinion, be suitable 
for use in war for the reason that it requires utmost secrecy. 


B. Substitution Method. 

In the systems that belong to the substitution method, it is necessary 
to distinguish simple substitution—that is, where each letter of the alphabet 
is represented throughout a cryptogram by the same character or sign—from 
multiple substitution, in which the alphabet is changed for each word or for 
each letter. The first is commonly called samp le , ke ^, and the second system 

bo simple key systems do not present any security; only the double 

key systems permit some more or less indecipherable contrivances. 


1. Simple Key Systems. 


From the point of view of form, simple key systems can be infinitely 
varied; one can not only arrange the normal alphabet in an almost incalcu¬ 
lable number of different ways, but one can also replace the alphabetical 
characters by numbers, by algebraic, astronomical, or arbitrary by 

groups of letters or numbers, and even by words or whole sentences. Basics y, 
however, and for the decrypter, all these combinations constitute one and the 
same system, giving way to one single process of deoryptment. 

The simplest and at the same time most practical system is that which 
consists of changing the value of the letters of the alphabet according to an 

agreed ^y above , how a keyword is changed into a key number; the 

same procedure can be followed to establish the order of succession of the 
letters of the new alphabet. Let Champjqny be the key; the numerical formula 
corresponding to it is 241685379. If we wanted to arrange the cryptographic 
alphabet according to this number, we would obtain: 

241685379 


bdafhecgi 

kmjoqnlpr 

tvsxzwuy 


ABCDEFGHI JKLMNOPQRSTUVWXYZ 
bdafhecgikmjoqnlprtvsxzwuy 

"Tournez les positions de l’ennemi" would give with this alphbet the 
following cryptogram: 


vnsrqhy jht lntivinqt fh jhqqhoi. 
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This system is two thousand years old; the emperor Augustus was al¬ 
ready using it to write to his children (9 )\ and according to Suetonius and 
Aulus Gellius, Caesar himself had not known of anything better to use, in 
order to correspond secretly with his friends, than an alphabet in which each 
letter was advanced four positions (10). The generic term Julius Caesar_.metho d 
is also often used to designate any system that is based on a simple substi¬ 
tution of the letters of the alphabet (ll). 

It matters little whether the cryptographic characters be numbers, 
arbitrary signs, or ordinary letters of the alphabet. 

The Bibliotheque Nationale possesses two volumes of letters in cipher, 
found in Offenbourg by Moreau in the baggage-wagons of the Austrian general 
Klinglin, in charge of the secret correspondence service; in these letters, 
which were very compromising for the royalist party of that time, each letter 
of plaintext is represented by a two-figure number, while the separation of . 
words is indicated by a zero. It is probable that the general was stronger in 
military tactics than in cryptography, because he evidently was ignorant of 
the very elementary principle that I have just pointed out; he thought it was 
enough to divide some words arbitrarily to throw decrypters off the scent. 

Here is, then, the first sentence of one of these letters, dated 31 

December 1795 * 

899952450 44520 4556253652 II. 25 O si ce n'est la 3152891499 14 254452 
44520 2311094259467524594995645 44HS934 5294 445234 114544520 . 

89 99 52 45 0 44 52 0 45 56 25 36 52 11 25 0 si ce n»est la 31 52 89 
rien de nouveau cer- 

14 99 14 25 44 52 44 52 0 23 11 0 94 25 94 67 52 45 94 99 56 45 

titude de la suspension 

44 11 89 34 52 94 44 52 34 H 45 44 52 0 

darmes demande 

= Rien de nouveau, si ce n'est la certitude de la suspension d'armes 
demandee. 

I cannot enumerate here all the simple key systems; I must limit 
myself to citing among the ancient authors the names of Tritheim (12), 

Porta (13), Blaise de Vigenere (14), Bacon (15), Hermann (16), and Mira- 
beau (17), who have created more or less ingenious alphabets, of which the 
description can be found in the special treatises (18).. In any case, these 
inventions can have for us only a purely archeological interest; they are 
not practical, and all of them, except Hermann's, can be decrypted with equal 
facility. 


2. Decryptment of Simple Key Systems. 

Whatever the system used may be, whether it is a simple key or double 
key, the decryptment of a message of which one does not have the key admits o 
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two quite distinct operationss a calculation of probability and a job of 
tentative assumptions. 

The calculation of probability rests upon a quality peculiar to all 
language Sc, that is, that certain letters occur more frequently than others, and 
that the ratio of these occurrences is expressed by a fairly constant average 
for the 9 to 12 principal letters of the alphabet. Thus, in the French, 
English, and German languages, the letter E is the most frequently repeated; 
in Spanish it is the 0, in Russian the A, and in Italian E and I; in French, 
there is on the average one E for every five letters. 

Thus, if one had to cryptographize (19) a dispatch with the alphabet 
below, based on the keyword Orleans , one would know in advance that it is 
the cipher letter A that will recur most often. 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
efcbadglmj ihknstqporuzxwvy 

,! 'Votre depeche a ete dechiffree" will give, in fact, a cryptogram in which, 
out of 26 letters, the A is repeated 9 times? 

ZSRPA BATACLA E ARA BACLMDDPAA 


A calculation which I have made on some circulars from the Ministry 
for war has given me an average of 560 consonants and 440 vowels out of 1,000 
letters, as follows? 


E-185 

N--71 

D-42 

F -14 

B 

»5 

S- SB 

T“6 5 

M -36 

Q-10 

H 

-4 

R~ 7B 

0-57 

C-34 

G~ 8 

Z 

-3 

I- 74 

U-52 

P~24 

X- 7 

Y 

-1 

A~ 72 

L -46 

v-16 

J- 6 

K and W-0 


When one works on messages of one or two lines, one cannot count on 
anything but the E, and it may still happen sometimes that the letter which 

occurs most frequently is an S, an R or an I (20).,. . nr 

Besides the repetition of letters taken singly, various binary 
ternary combinations are to be noted, and a multitude of other particulars, 

which it would be too long to enumerate here. 

So, for the binary combinations of E, one finds most often es and e_, 

then come, in the order of their importance, se, t£, et, de, me* §1, e^, 

I do not speak of the structure of words themselves, since a system 
that preserved in the ciphertext the word divisions of the plaintext would 

not present a shadow of security. + 

As a general rule, it is enough, in the decrypting of a message, to 
know the character which represents the letter E in order to be certain o 
finding, whether by calculation or by tentative assumptions the meaning of 
all the others. One could even state as a principle that the value of a cipher 
is measured by the guarantees it offers against the discovery of the sign 

SI to ... r.«..r ^ to Ml* 

as to indicate to him the course followed by decrypted, I shall content my¬ 
self with showing him by a very elementary example how one proceeds in the 
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decryptment of a text of which one does not have the key. 

Suppose the cryptogram is 2 i'P Z BOB CSRRSQSPB GB PSXB JBJ PBOOXBJ„ 

x_ 2 _2_ 4 _!_ _i- 2 -8— 

SP Z BOB CSRRSQSPB CB PSXB JBJ PBOOXBJ 

The character occurring most often is B; I say that it corresponds 
to the letter E, and I make the following arguments 

No* 3o BOBs concerning three-letter words beginning and ending with 
e, there is only ete . 

No. 2. Zt the French language has only two one-letter words-, a and 
v; ete cannot be preceded by y, therefore Z = a. 1 

' No. 7. JBJs this group can only be ses; it is the only three-letter 
word having an e in the middle, preceded and followed by the same letter. 

No. 8. PBOOXBJ: we already know five letters of this group, -ett-es; 
the only word that fits this pattern is lettres. . , , 

No, 1, SP: the only two-letter words that can go with a ete are jja, 

il, on; now P is an 1, therefore SP - il. 

No, 6, PSXB « lire . 

No, 4 . CSRRSQSPBs five characters are already known to us: 

_j-.ile . The termination ile indicates an adjective; among adjectives in 

ile witiTriine letters and having two i 5 s in the body of the word, the rhyming 
dictionary gives only difficile . 

No. 5. •CB = de. 

We have, then, II a ete difficile de lire |es lettres. 

The longer a cryptogram is, the easier it is to decrypt; as a general 

rule, one line is sufficient. . 

General Lewal says in his Etudes de guerre (22) that a simple key 
cipher sufficiently guarantees secrecy for ordinary needs and "for matters 
without major importance", 

I do not know what is supposed to be understood by "matters without 
major importance", but the reader can be sure from the cryptogram I have just 
analyzed, that a dispatch written in this way, when it is two or three lines 
long and one has not had recourse to any help, can sometimes be deciphered at 

sight. ,, 

The simple key cipher presents some slight guarantees only under the 

following three conditions: 

1. Word divisions must not be indicated in the ciphertext. 

2. Double letters must be suppressed. 

3. Neither capitals, accent marks nor punctuation must be used, 

To avoid errors in transcription it is even indispensable to break up the 
cryptograms into groups of four or five characters ( 23 ) ■> _ Our last message 
should" have been cryptographized as follows: il a ete. dificile. de lire. ses. 
letres, = SPZBO BCSRS QSPBC BPSXB JBJPB OXBJ. 


3 . Double Key Systems. 

We have seen that double key ciphers are those in which the alphabet 
is changed for each letter. 
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Many double key systems have been invented, but there are scarcely 
three or four that are really practical and that are still in honor in our 
days! however different in form, they are basically identical andb|long to 
the type explained at the end of the 16th century by Blaise de v igen e re. 

For almost three centuries they have served as secret ciphers to the majority 
of the sfaU courts of Germany and Italy, and today they are still -nsidered 
indecipherable in the eyes of people who are not up to date 1 P 

of deory P^f; method of cryptographic writing destined to the needs of 

2JS 

and that excludes any kind requiring the simultaneous use of both (24). 


a. Porta System. 

The invention of the first double key lite£al (25) system goes back, 

A, C, or B, D. 


AB 

abcdefghilm 

nopqrstvxyz 

CD 

abcdefghilm 

znopqrstvxy 

EF 

abcdefghilm 

yznopqrstvx 

GH 

abcdefghilm 

xyznopqrstv 

IL 

abcdefghilm 

vxyznopqrst 

MN 

abcdefghilm 

tvxyznopqrs ( 

OP 

abcdefghi 1 m 
stvxyznopqr 

QR 

abcde fghi lm( 
rstvxyznopq 

31 

abcdefghilm 

qrstvxyznop 
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VX 


YZ 


a 

p q r 


1 m 


bcdefghi 

stvxyzno 


1 m 


a b c d e fqhi 

opqrstvxyzn 


H- “S'" *S«SpSSi »ith » “ '■ “• 

them in the tableau. Thus, i bv a - b by n and n by b, and so on. 

represents a by a, and vice ;versa, *^ p ort a, as a man who knows 

But in order to foil investiga o eaoh letter with a different alphabet; 
how to decrypt, recommends writi g oarresp ondents to take the eleven alpha 
moreover, in order not to oblig ickly betray the secret, he proposes 

bets consecutively, which would y cpi V word be agree d upon whose 

S. SS- 

tr,-T£ stssSS! - ^ •• ~ li - s “ 

necessary.^ ^ ^ ^, with the key 

votredapeoheestdeoh iR 

dhmayzxintonxamvyynpoymnx 


= dhmay zx intonxamvyynpoymnx 


Porta’s invention, we have seen, opens^in 
history of cryptography, but it prese . of a ]_i # the small number of 

caused it to be abandoned some time ag^fi f representing the sam e alphabet 

alohabets, and secondly, the nece y circumstance, a word 

fSiUt ... - 

of four letters, such as 9 1V 

alphabets. 


b- 


Square cipher or Vigen^re tableau. 


The sauare^her. also by l£ 

~.r e xcellence , is nothing else but the y J e ^ in his Ti a ite_£es 

dTvlSSI^ST^ho published it, just as it i di[iary favor in the chan- 

ch i f f res (28). The square cipher “ n8 to believe that scarcely 

celleries of the 18 th century and, that it was still used, after 

a better one was found afterwa 

1870 in the Ministry for War. time of the Revolution, 

1 # Dlandol made it known to the P^' says that ’’this 

in a work that I have already ° lted V excellen ce because it contains the 
greates i^numbe r ^fadvan^e^tha/one could desire for secret correspondence, 
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It would contain them all without exception," he adds, if it were not a bit 
slow in operation; but it quite makes up for this inconvenience by its in¬ 
credible security. This security is such that the whole universe would not . 
learn it if one did not know the keyword agreed upon among the correspondents, 
one could show his message to everyone, without a single person being able o 
read it." Verily, citizen Dlandol was a better patriot than decrypter. 

The arrangement of the Vigenere tableau differs from that of the Porta 
tableau in that the alphabet is placed in it in a sauaEe^umber, and one ob- 
tains, thus, as many different alphabets as there are letters in the alphabet (2 



A 

B 

C 

D 

E 

F 

G 

H 

I 

J 

K 

L 

M 

N 

0 

P 

Q 

R 

s 

T 

U 

V 

W 

X 

Y 

Z 

A 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

g 

r 

s. 

t 

u 

V 

w 

X 

y 

z 

B. 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

g 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

G 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b !j 

D 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

p 

g 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

C j! 

1 1 

E 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

F 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

g 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

n , 

G 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

H 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

I 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

J 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

K 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

L 

1 

m 

n 

o 

p 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

G 

d 

e 

f 

g 

h 

i 

j 

k 

M 

m 

n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

•l 

1 1 

N 

n 

o 

p 

q 

r 

s 

t 

11 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

: 0 

o 

p 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n j 

P 

p 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o | 

! Q 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

p i 

R 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q j 

s 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

T 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

g 

r 

5 ! 

U 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t f 

V 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 

n 

o 

P 

q 

r 

s 

t 

U 1 

„ i 

w 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 

m 

n 

o 

P 

g 

r 

s 

t 

u 

V 

X 

X 

y 

z 

a 

b 

c 

c 

e 

f 

g 

h 

i 

j 

k 

1 

m n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

Y 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m n 

o 

P 

q 

r 

s 

t 

u 

V 

w 

X i 

Z 

z 

a 

b 

c 

c 

e 

f 

g 

h 

i 

j 

k 

1 

m n 

0 

P 

q 

r 

s 

t 

u 

V 

W X 

y I 


As for the operation of this tableau, one proceeds as for the Porta 
svstem; it is only necessary to remark that the top horizontal alphabet re 
Resents the normal alphabet, and that the other 26 that follow are the cipher 

alphabets.^ ^ ^ ^ 1(J tunnel « is to be cryptographized with the 

three alphabets corresponding to the word BAC; we will hav«. 


det rui sez let unn el 
BAC BAG BAG BAC BAG BA 
eev suk teb mev vnp fl 


= eevsuktebmevvnpf1 
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Nothing is easier than to read a cryptogram written in this ma™er 

sssrs - =£=>■- - 

- -."“ t: 2.fS»S oSSSm 1= to to dtoiptotod. IU.I3 toito 
the key, we will find: 

EYFDA OLRAK HHGMH NCFMK 
TUNIS TUNIS TUNIS TUNIS 
lesvi vress ontep uises 

- Les vivres sont epuises. 

As we shall see further on, messages written with the J i ^ r ^ ab ' 
lean artery easily decrypted; it is only in exceptional cases that the 

system can provide some security. 


c. The Saint Cyr System. 

This system, which has been in use for a J\ have 

designated^it°under S .Tool Zero it is taught and recommended 

t0day ‘ Here is the description of it taken 

of the year 1880-81 as it was autographed by the student 

vision ( 30) : 

. ,« savs there, ”is composed of a fj,xed_alphabet, under 
neath^which. S slides i ^l^^le^habet; two strips of s q uare-ruled 


IT iBlnTnlTPFrGl HI II Jl K| L| Ml N| OIPIqJ 

R S| T U 

v|w xTlz | 

[a b c d 

_TJ--1 

.e f g h 1 

i j k! 

1 m n ol 

pgr 

s t] 

01 

w x y z a b i c 


, * - „ o s letters is taken to rorm me v*"'' 

u,...totoSo..dUth.tou-to-■«*■ ‘* 

‘““•‘■"stoto tt . 

wise divided into groups of • , , first then the second ones, 

the first letters of each group are enciphered first, tnen 

and finally the third. . first letter of the key, B, re- 

presented°o^the^mOvable^^phabet^is'placed^under^the^letter^A^of^the of*^ 

fhfgr^sTn tfe message oZte npp^r alphabet, the letter corresponding to 

it on the lower alphabet is written ^ own ‘ taken- To encipher them. 

Then the second letters of the gr P A of the fi xe d alphabet, 

the second letter of the key. A, is p ace rjr^ e same is done for the 

and the same operation as we have seen xs done. lhe san 
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third letters. The message is then found to be as follows: 

det rui sez let unn el 
BAC BAG BAG BAG BAG BA 
eev suk teb mev vnp fl 

= eevsuktebmevvnpfl 

In admitting, the text adds that the instrument “ 

captured, one is saying nothing, it s neoessa abridgment of 

It is easy to be --red that this process i^ ^ alphabets that 

the preceding one, by comparing in th y 

correspond to the key BAC. 

Square Cipher __,_ 

|ftBCDEFG~HIJK LMNOPQKSTUVWXYZ 

A abcdefghijklmnopqrstuvwxyz 

B bcdefghijklmnopqrstuvwxyza 

C cdefghijklmnopqrstuvwxyza 


St. Gyr System _ 

■-TTT7nnr¥^iri ju hTopq _ 

nrir^-diTSTri j k I m n o p g r s t u v wjc_y_a_a_b^j^£ 

• y;iv irnu' sVo p q r v v *>.° d 


Since the same ciphertext is obtained with> both systems neither the 
correspondent nor the decrypter have to wonder with which of 

message was written (33) . presents over the preceding is 

The only advantage that this p remade in two or three minutes 

^es a real value only if 

the £ 

s.T3£ see ^ ” d on 
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xx?<k 1„«*„«,«». r iS= 

really nothing but a simple Vigenere tableau. 


d. Beaufort System. 

A quite ingenious modification was made to the square cipher by the 
d , t» x: +■ ^^Q c ^ 7 ^ A1 f houcrh it appears at first sight 

-:rrs«i:tST.:“srs;-si„r 

-n. i. th. tau— 


b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 


d 

e 

f 

g 

h 

i 

j 

k 

1 

in 


c 
d 
e 
f 
g 
h 
i 

j 
k 
1 
m n 
n o 


f 

g 

h 

i 

j 

k 

1 

m 


m n 
n o 


h i 
i j 
j k 

k 1 
1 m 
m n 
o 


j k 
k 1 
1 m 
m n 
n o 


1 ra 
in n 
n o 


m n 
n o 


m n 
n o 


P 

d 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 


w x 
X y 


W X 
X y 


w x 
x y 


y 

z 

a 

b 

c 

d 

e 

f 

g 


p 

q 

r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

G 

f 

g 


o 

p 

q 

r 

s 

t 

u 

V 


p 

q 

r 

s 

t 

u 

V 

w 


w X 

X y 


W X 

X y 


y 

z 


g h 

h i 


y 

z 

a 

b 

c 

d 

e 

f 

q 

h 

i 

3 


a b 
b c 


d 

e 

f 

g 

h 

i 

j 

k 

1 

m 


n 
o 
P 

q 

r 
s 
t 
u 

V W X 

w x y 
x y 
z 
a 
b 
c 
d 
e 
f 

g 
h 
i 
j 
k 
1 

m n 
m n o 
nop 


y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 


z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 

m 


q 

r 

s 

t 

u 

v 

w 

X 

y 

z 

a 

b 

G 

d 

e 

f 

g 

h 

i 

3 

k 

1 


r 

s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 

m 


s 

t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 


t 

u 

V 

w 

X 

y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 

m 


u v 
v w 

W X 

X y 


w x 
x y 


y 

z 

a 

b 

G 

d 

e 

f 

g 

h 

i 

3 

k 

1 


z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 


y 

z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 


z 

a 

b 

c 

d 

e 

f 

g 

h 

i 

3 

k 

1 

m 


y z 

z a 
a b 
b c 


c d 
d e 


a 

b 

c 

d 

e 

f 

g 

h 

i 

j 

k 

1 

m 


m n 
n o 


m n 
o 


m n 
n o 


m n 
noo 
o p 


m n 
n o 


m n 
n o 
o P 

P g 
q r 


w x 


P 

q 

r 
s 
t 
u 

U V w 
V W X 

w x y 
x y z 
y z a 


"Emparez-vous des hauteurs," enciphered with the key BAC, will give 
the following cryptogram: 

emp are zvo usd esh aut eur s 
BAG BAG BAC BAG BAC BAC BAG B 
xon bjy cfo hiz xiv bgj xgl 3 

= xonbjycfohizxivbgjxglj- 
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Let's see now how one proceeds. Start at the ^^ f 'Mte 

horizontal alphabet, descend in a straight Ixne as far^as the b, ^ ^ 

thfie'tfer^flMch^you find there, is tta cryptographic sign needed; 

and likewise with the other letters. system so amazed, certainly 

ild „ t «s;. « fS . «»• 

follow! 

Square cipher.______ 

a 7. yxwvutsrqponm lkjihgf e _d_c_b l 
T f b c d e f g h i " Tk 1 m n o p q r a t u v vTTY^ 

B bcdefghijklmnopgrstuvwxyza 


defghijklmnopq 
St. Cyr System. 


rstuvwxyzab 


ZYXWVUTSRQPONMLKJIHG F e d c b a| 

— v. „^ c f n hlikl mnop qrstuvw x yzabe.-_- 

. h a d a f q h 1 J k"T1mTTp~q~r S t u V b c d e ■ 


’ The result would still be the same if 

Of the letters in the -mal alphabet °“%^how!n^ple: 
alphabet azvxwvutsrqponmlkjihgfedcb as in the ron 

ABCDEFGHIJ etc. 

A azyxwvutsr..* 

B bazyxwvuts . .. 

C cbazyxwvut. . • 

Ddcbazyxwvu..* 


e. Gronsfeld System. 

jsrtt 

or some such device.^ inspector of telegraph lines, expresses him- 

self ° n ”Let' s^suppose^that one has chosen as key any number at all; under 
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tangle of which it is impossible to discover the key, even if one were 
endowed with the perspicacity that Edgar Poe supposes in his hero in the 
story of the Gold Bug „ or with the intelligence of the agents employed. 
to decipher +"he correspondence of the Duchess of Berry in 1832, according 
to the account that is found in the memoirs of M. Gisquet#** 

With all due deference to the author whom I have just quoted, the sys¬ 
tem of the Count of Gronsfeld is not much more difficult to decrypt than a 
modest simple-key cipher; it is, moreover, only a disguised form of the Vige- 

n&re tableau (37)* , 

Let us take our example,, and again encipher '“Detruisez le tunnel % 
with the key 1022 each letter of the plaintext will be represented respec¬ 
tively by another,, one „ zero or two positions further ons 

det rui sez let unn el 
102 102 .102 102 102 10 
eev suk teb mev vnp fl 

- eevsuktebmewnpflo 

If a key composed exclusively of numbers lower than 10 is chosen, 
this system fulfills perfectly our third desideratum , and even offers, if 
the numbers are very low, certain practical advantages; but these advantages 
lose much of their value in view of the facilities that this arrangement 
furnished to the decrypters 5 investigations. 


f. Variable key system. 

We shall see further on that the decryptment of double key systems 
is based mainly on the knowledge of the number of letters composing the key. 
People have thought up various combinations to prevent decrypters from making 
the calculation; one of the best ones is due to a member of the military tele¬ 
graph commission. He proposes to interrupt, at irregular intervals, the 
order of succession of the alphabets, such as the key indicates it* by return¬ 
ing suddenly to the initial letter, or first alphabet. So, if the key is 
Epaminondas , instead of repeating it regularly in series of eleven letters, 
he cuts'it off arbitrarily, and writes; epa-epaminondas-epaminondas- epami- 
epaminon- etc. 

The point of interruption is indicated by one of the letters of the 
key, which is inserted at the desired places in the ciphertext. Here is an 
example, in which I have put as an indicator letter the second one of the 

key, that is, P§ 

Nous - partons - ae - main 
EPAM EPAMIN0 EP EPAM 
0.00 P 00000.0 P 00 P oooo 

In order to avoid all confusion as to the meaning attributed to the 
indicator letter, this is replaced in the cryptographic text by an Arabic . 
number corresponding to the place that it occupies in the keyword; thus, m 
the example below, where the P is the second letter of the key, it will be 
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replaced by a 2 in all the places where it is not supposed to play the role of 
indicator letter.. 

With the square cipher we would have the following cryptograms 
rdue Pt 2 r fwag Pht Pq2 a z . 


To prevent the decrypter from making an entry on the first letters of 
the message, it is made to begin with some nulls n care being taken to indicate 
by the indicator letter the point at which the true text begins. Our crypto¬ 
gram could then be finally written? 

xmoprduept2rf ■wagphtpq2aza 


4 o Decipherment of Double Key Systems„ 

Except for a small work, written in 1863 by the German major Kasiski(38), 
there has not been published,, to my knowledge , any essay on the decryptment of 
double key secret writings„ All that is found in Porta, Cospi, Breithaupt, S 
Gravezande, Thickenesse, Kluber, Lacroix, Vesin, Joliet and others, applies only 
to simple key systems, and still these authors have scarcely touched on anything 
except deciphering cryptograms in which word divisions are clearly indicated(39 ). 

A passage in the Interpretation des C hiffres by Cospi, the secretary of 
the Grand Duke of Tuscany/would tend to make one believe that decrypters have 
avoided at all times revealing to laymen their decrypting procedures. One reads 
on page 3! "There are two kinds of ciphers, the ones simple and the others com¬ 
pound; leaving aside these latter as almost impossible to .decrypt, we shall 
speak only of the first ones, which are the simple"(40) . Now, it is hardly 
probable that a man of Cospi ? s talent did not know how to decrypt the systems 
that Porta and Vigenere had published a half-century earlier. 

Major Kasiski has based his system of decryptment almost exclusively 
on the determination of the letters of the keyword. While acknowledging the 
author’s competence, I cannot help but conclude that that is a singularly com¬ 
plicated method which, in a great number of cases, must give a negative result. 

I am going to indicate a process which seems to me not only more certain, but 
still more simple and more methodical. Without wishing to present a complete 
work, for which I do not see too much need, I shall try nevertheless to develop 
the question enough so that the reader who wishes to practice the art of de¬ 
ciphering” will be able to discover by himself and without difficulty all the 
little details of which a complete explanation would require at least fifty 
pages; fabricando fit faber „ one becomes a decrypter by decrypting. 

l”said further back, that, in every substitution system, the decrypts 
ment of a cryptogram of which one does not have the key requires a calculation 
of probability and a job of tentative assumptions. In the simple key systems, 
in which one makes use of only one alphabet, calculation and assumption are 
necessarily limited to determining the arrangement of that alphabet; in the 
double key systems it is a question of finding two unknowns? 1. the number of 
alpha bets ; 2. their resp ective arrangement. 


a. Number of alphabets. 


It would seem at first sight that the means of investigation must be 



lacking to establish the number of otters or alphabets of the key; nothing, 
however,^ easier^ that a sentence like this is to be cryptographized: 

H Vous ne pouvez vous defendre sans vous exposer,, etc 0 

Since there is between the first two ifiSB a distance of 8 letters, and 
between the second and third a distance of 12 letters, it wi-1 happen, i 
choose a key of 4 letters, that the three vous will be enciphered with the same 
a^habets and they will give three similar tetragrams 0 If there were a fourth 
vous in the course of the text, it would give another similar te | ra ^» p ^’ 
that it were spaced from the last one a number of letters forming 

tipi® of t;. . takfe another example: "La presence de soldats ennemis nous a de 
nouveau St4 annoncie ce matin de differents cates," and let s omit the spaces 

lapresencedesoldatsennemisnousadenouveaueteannonceecematindedifferentseotes 

There are present, among these 75 letters, 
trigrams nou, sgn, nc&p and 15 bigrams eg, gs,^e. 

Even if one uses a key of 5 


8 „ 9 


18 repetitions, including 3 
ce, no, te, Is, etco 
different alphabets, it will 


always tSToit IZtZ or another of th^e're^titions will be found enciphered 

with"the same alphabets, and one will thus have a ciphert 

corresponding places, similar groups of letters (41) . 1 shall now general 

the case and state the following two principles! 1, In gv|£j siphext^i, ^ 

±hT™f^oik^ is 

multiDle of the number of l etter s jyi the k^yjjoxd ' ° . , _ Q _^ 

" flnTthe exact number of alphabets in the keyword, it is only n. - 

te L th. I«tPr ..»t.l..d 1, tb« n—«,. tM represent the 

tetter. ^the 


RMUWQPMQGJfflWBGGKKKN I^UXWWTM^XHE PH 


We have here 4 repetitions' 

. . v/J rr 1 ) j_\_. 

Now, 


TMc 


from. 

MU 

to 

tf u 9 

there 

are 

21 

« 

GG 

tt 

G 9 G 9 

»» 

w 

15 

M 

TM 

*» 

t M v 

»v 

»» 

6 

« 

GXH 

i* 

g 9 x 9 h 9 



21 


1 trigram GXH, and 3 bigrams MU, GG, 
paces £ 7 x 3 
« =5x3 

« Z 2 x 3 

" £ 7 x 3 

the cryptogram has been enciphered 


The common factor is 3 l and, in fact, 

with a the chances of finding combinations of m- 

ters produced by the use of the same alphabets are in inverse ratio to the length 

—ska* r.r jssss.'s sssss-^ssss =.u 

this is a point to which I shall return further on D 



bo Arrangement of the alphabets. 


Let us note first of all that the number of different alphabets can 
scarcely go beyond the number of letters in the alphabet; with a more or less 
large number it becomes in fact impossible to represent the key by one word, 
or at least there are certain difficulties in the management of the key. n 
addition, it is not the possibility of using a great number of different alpha 
bets that gives value to a system, but rather the greater or lesser difficulty 
of dtermining the number of alphabets employed (43) <> 

These 26 alphabets can be arranged in three different ways: 

1. The letters follow each other in normal alphabetical order, as m the 

Vigenere tableau. \ 

2. This order is transposed in any way whatever (see page 30), but the Zb 

alphabets are still arranged in a square number. 

3 0 The 26 letters are placed in a different order in each one of the Zb 

alphabets. , . , , 

The decrypter generally has no trouble in ascertaining which of tnes 

three arrangements has been adopted. 

Unmixed alphabets .— Let 9 s take again the preceding cryptogram and 

divide it into groups of three letters: 

123 123 123 123 123 123 123 123 123 123 123 123 

RMU UWQ pmq gxh wbg gkk kni tmu xww tmg gxh eph 

We know that it is the letter E that occurs most frequently; if, then, 
I bring together the letters which in the different groups belong to the same 
alphabet it will be easy for me to ascertain which are the three letters tha 
represent the letter E. Moreover, since each of the 26 alphabets is charac¬ 
terized by the cipher letter that corresponds to the E, the of * ^ 
single letter will necessarily bring with it the knowledge of all the 
in the same alphabet, whether the cryptogram has been enciphered with the Vig - 
nere tableau or with the St. Cyr or Gronsfeld system. We will have then. 


I II 111 


RMU 
UWQ 
PMQ 
GXH 
W B G 
GKK 
KNI 
TMU 
XWW 
TMG 
GXH 
EPH 


1st column^ G s E 


grant that in 2nd columns M s E 
3rd columns H s E 


If one looks now in our fable on page 16 for the alphabets in which E 
is represented by the cipher letters G, M, H, one finds that they are the third, 
the ninth, and the fourth, that is, those which correspond to the keyword CID, 
or to the number 283 in the Gronsfeld system (44>(«Here, then, are the ^hre- 
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ABCDEFGHI JKLMNOPQRSTUVWXYZ 
C c d e fghi jklmnopqrstuvwxyzab 

I ijklmnopqrstuvwxyzabcdefgh 

D defghi jklmnopqrstuvwxyzabe 
s Personne ne peut dechiffrer votre depeche. 


When the message is shorty it sometimes happens that the coefficient 
of the repetitions, in such and such a series,, leaves us in doubt about the 
cipher letter that corresponds to the E 0 This inconvenience is not very great, 
especially if the keyword has only 5 or 6 letters, because the context puts 
us immediately on the track„ 

It may even happen that, in a cryptogram of several lines, none of 
the most frequently repeated cipher letters correspond to the letter E. There 
exists a very simple means of determining, in spite of this anomaly, the diffe¬ 
rent alphabets of the keywordo 

In order to grasp this procedure well, it is necessary to remember 

that, in unmixed alphabets, the relative position of the letters is always the 

same? in the alphabet in which X corresponds to E, the following letter, or m, 
necessarily corresponds to F, and the £ corresponds to K and £ to W? likewise, 
in the alphabet in which the letter E is represented by a £, the letters K and 

W will be represented by the cipher letters v and ho Now, since the K and the 

W are only rarely found in French, the decrypter will reject any alphabet m 
which the cipher letters corresponding to these letters have somewhat iugh eo~ 


efficientSo , 

Let’s suppose now that, in the calculation of the letters in such and 

such column, I find for the strongest frequencies 12 1, 9 £, 8 d, 6 v, 5 h, 

5 u 4 Xg 3 o, 3 g? I will see immediately, on inspecting the tableau, that the 
alphabet sought must be that in which the E is represented by the ciphei letter 
h, because in the other 8 alphabets the cipher letters 1 , £, & 0 eta,„ 

correspond sometimes to a K, sometimes to a W, an H, a Y or a Z, which, in view 
of the minimum importance of these letters, is an inadmissible case. 

From the point of view of the decipherability of the message^, the sys¬ 
tems with unmixed alphabets do not present any more guarantees than a simple 
substitution in which word division is not indicated., (46; » 

b n Irregularly t ransposed alphabets . —When, i.n the decryp~men.. of a 
cryptogram, it is impossible to make sense with the alphabets that the repe¬ 
titions of the letter E seem to indicate, one must suppose that he rinds him¬ 
self in the presence of a mixed-alphabet system, and it is necessary in some 
way to try, one after another, the first letters of the message. If the 
cryptogram is long enough, the solution of the problem rarely presents insur¬ 
mountable difficulties? it demands only a little patience and some inductive 
reasoning. In such a case, besides the calculation of repetitions oi single 
letters, it is necessary to note the repetitions of certain bigrams and 
grams of which I spoke on page 12 ? it is also necessary to know how to put to 
account the facts that are furnished on the probable nature of the correspon¬ 
dence , and to keep in mind the style belonging to the particular circumstances 
or situation of the correspondents. Thus, to give an example, the bigram eg 
is extremely rare in correspondence between persons who address each other 
familiarly as 1 b. while, on the other hand, the majority of instructions sent, 
on campaign, to junior officers commence with vous or le. 

We are going to decrypt a dispatch sent from London to the Havas 

Agency, concerning military affairs in Egypt. 



London, 2 September. 


RBNBJ JHGTS PTABG 
NPMTJZ CHGWO UDCKO 
AWMWK AQMTG LVGHC 
LKCEY IF3HX JHSBO 
NBAUZ GDPVR SAJEX 
JQQJX JZMKZ JJYHG 
JJMKX LDXJH DBOAJ 


JXZBG JICEM QAMUW IV3AG NEIMW 
JKKBC PVPMJ NPGKW PWADW CPBVM 
QBMWE ZEUKW RETEW CPBVM CBAMN 
DFEHK ZAAAK SWMYZ 3KATJZ IKCDR 
NDUBJ GDUJX LMXJL SKXBO HAMNZ 
DTXIJ JUYPV JVXWA JLMHC JJBSO 
JJQDJ CTMJZ LQXPZ HMJEH UEUIG 


REZKZ SUABR RBPBJ CGYBG JJMHE 
RBZBH JWZDN MEUAO JFBMN KEXHZ 
RBJCZ EAUUZ KBCBX RBJEJ DTEDR 
UBAVL NJSBJ SBPAL GDYFZ GBAQK 
IUGWO RBJEJ DTMKZ SBSBE DWZMJ 
CEJTZ IJBWX EEXWX .JWGWX JWSBE 
DAAUW IVGAG NE. 


Let 9 s try first 


to determine the number 


of alphabets in the keywords 


RB - 

R B 

3 

55 

RB - 

R ? 9 B 9v 


105 

BJ - 

B 9 J 9 

c o> 

50 

BJ - 

B 9 9 J’ 9 

Cf*» 

225 

BG - 

B 9 G 9 

GO 

5 

BG - 

B 9 9 G 9 9 

£ 

40 

RE - 

R 9 E 9 

030 

as 

115 

MW - 

M’W’ 

z 

94 

MJ - 

M'J' 

z 

105 

PQ - 

p 9 q 9 

CO 

305 


il 1 3 
21 x § 

10 x 5 
45 x 5 

5 

8 x 5 or 4 x 10 
23 x 5 
47 x 2 
21 x 5 
61 x 5 


I have noted here only half the repetitions, but that is enough for us 

to see that the keyword must be composed of 5 letters. 

If we divide the cryptogram then into groups of 5 letters and count the 

repetitions by column, w« finds 


1st columns 
2nd column! 
3rd column! 
4th column: 
5th column: 


19 j, 

„ 8 r. 

7 

d. 

7 

n 

, 1 

s 

ff 7 

c. 

6 i, 5 1, 

4 g. 

3 Pi? 

3 u. 

2 h. 

2 k. 

2 q. 

2 

® e 

2 

a, 

2 

z. 

1 : 

m. 




ff 4 f, 


14 b 

, 10 « 

0 

7 w 

0 

7 

j. 

6 ■ 

a. 

5 p 

» 5 tff 5 ▼, 

» 5 d 

» 5 k 

7 3 u 

3 h. 

3 q. 

2 

m, 

1 


1 

to 

1 

Sff 

1 g, lx. 





12 m 

* 9 g. 

9 

a. 

7 

X 

. 6 

j 

. 6 

u. 

6 b, 6 c. 

5 Zff 

4 s. 

4 Pff 

4 y. 

2 k. 

2 n. 

2 

1 0 

.1 

q. 

1 

Off 

1 

i ff 

1 t. 


5 d. 


3 t. 

15 b 

, 8 w. 

7 

«ff 

7 

h 

, 7 

k 

, 6 

u. 

6 a, 6 m, 

5 

5 j,, 

2 P, 

2 i. 

1 

ss , 

1 

C o 

1 

A 0 

1 

q o 






16 z 

, 12 j 

ff 

9 x 

' 0 

8 

<3o 

1 

Wff 

6 o 

, 4 1, 4 k 

, 4 r 

, 3 a 

, 3 h 

3 m 

3 n, 

3 

1 

a, 

l 

Vff 

1 

Su 









When we work on a : fairly long cryptogram, we are authorized to believe 
that the cipher letter repeated most often in each column corresponds to the 
letter e; we admit also, and that as a necessary consequence, that the ^nd and 

4th columns (B = e) represent the same alphabet. 

As for the probable content of the cryptogram, we must watch for ouch 

words as Arabi, Wolseley, Sues, Ismailia, canal, general. soldats. 

UtS nSTfSthonnore that of the first ten letters we already know 3, 

which represent e, to wit: 


1234512345 
BBHBJJ HGT _S 

u e.®.@ooo . 


That being said, I ask myself with what part of speech a telegram ad- 
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dressed to newspapers might begin, and I proceed* as must always be done* by 
eliminationa 

It is hardlv probable that the first sentence would be interrogative or 
imperative? if the first word is a verb* it must be in the infinitive form or 
the present participle* The very simple style of this kind of communication 
does not permit the supposition that it is an infinitive? neither is it a pre¬ 
sent participle* because it would have to belong to a verb of four syllables 
with an e in each syllable* and rege nerex * legenerant, which is the only one of 

this kind* does not fit the situation. 

In regard to nouns* it is necessary to eliminate common nouns* which 
are always preceded by some determinative? the same must be done with the ad¬ 
jectives divers,, different * maint and certain* the only ones that could begin 
the sentence without being preceded by de* but which do not have the a in the 

proper position * 

Among proper names (those which are in use* of course) * number-words * 
adverbs* prepositions and conjunctions* there is not a single word that has 

two e 9 s in the 3rd and 4th positions. 

The cryptogram* then* can only begin with the article le* leg* the pro¬ 
nouns je* me, ce* cet* ees* mes* ses* the negative ne* or the preposition 

If it is the negative ne* the present participle of a verb must follow* 
such as recevant * revenan t„ and GTS will represent the termination now 0 

this is inadmissible* the t being a frequently used letter and the cipher let¬ 
ter S only occurring once in the 5th column. 

It is necessary to reject also 2,es* cet* ces* mes* ses* the third ci¬ 
pher letter* N* being scarcely able to represent the letter s or i* for the 
reason that, it appears in Its column only two times. Since the first cipher 
letter* R* occurs eight times* it is equally impossible that we are in the 
presence of a j (je)S it is* then* 1® or ce* but rather le than ce* because of 
the frequency of cipher R, 

he or ce must be followed by a noun, an adjective or a number-word, 
and* note it well* the word must have an e in the first two^syllables. No num¬ 
ber-word fits the case? the adjectives recent* <&cenX and^ temergip* which 
have the two ® ? s* must be rejected since the coefficient 1 of cipher N is* as 
has already been said* too low for a is detestable will not fit either* -*« 

12th cipher letter* T* not standing for e? the nouns dese^and iSlSSESESS 
are* because of their £* in the same case as decent and 3re fin J S 

that only general fulfills the desired conditions? we then decide on 1® instead 
of ce. I write down these two words* and I continue, 

_ ___ S FTABG J X 

Le general ° ° ° » ® ° ® ° 


It is to be assumed that the dispatch tells what general is concerned* 
it is* then* a proper name that is going to follow. Cipher S must be a very 
little-used letter* such as k* & 0 X* £* because* as we have said* it appears^ 
only once in its column? we have* furthermore* an e in the 5th and ,th position* 
and" this latter e is followed by a cipher letter with the coefficient 1. that 

answers exactly to Wolseley. 


Z B G J I C E M 0 A_M 


Le general Wolseley , e 1 e 


o ® 
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It is quite probable that the verb is going to follow its subject, w 
already know the value of the 2nd, 3rd and 4th cipher letters„ and we know tha 
the Z has a rather high coefficient; if Z is the auxiliary ver A. 
ciple that follows es eleve or electrise^ but these do not have the final i n 
the right position? so the verb is in a simple tense. Among the only possi 
verbs, depend, dementi mene „ retenu and t|I®graph!e, 
ferred, because of the final e u 

U W I V G A G NE 


--w * 

the last on© is to be pre- 


telegraphie 


ail 


There is reason to suppose that iil&EaEMfi is followed by or S^U. 

"use we P know STi (“l)'^^hf^cond^olu^sc it t probably a pla c ; name, 
cause - know the 1^- ^ fe@ fay the prepositi on *, here however 

it must be a simple because the e of the 3rd column 1. 

In regard to place names beginning with a vowel, having an a in 4th po.iti 
and an l in the 6th, one can cite only Ismaiiiao 

__ TMWREZ KZ 3_U a B-R-B-B P B J,S 

d 9 Ismailia ooilato*odseol® 0 «no 

The structure of the sentence, as well as the presence of il. indl °^? lv 
immediately that IM stands for os: the verb has to foilow and one guesses easily. 
from the letters that we already know, that this verb is &tten£o As tor 
final group, the dictionary gives only the words pile and seu_emen_, w 
the pa?tern S it is evidently the latter that we have here. 


SYBGJJMH e. N_P J1 


qu’il attend seulement 


e 1 e o e r 




The adverb seulement is rarely followed by a sflej but since the G occurs 
only once in its cofe^h applies very wel^to g and since we^ave^n £_ 
in the third position, we must admit the gue. Th- last gr P appears 

Ss.'UU’srS: ffs&H’rrs ^- 

fills these requirements. 

tt^hhhwouuck o 

detra. . . . r t . e t . e .ommunications 

This passage presents no difficulty and we read: de tEans]DO£tg fit dS 
J^nL bL end of the sentence is still easier: soil 
^TrfaTTseTour^n a. re _ne n.u.*lle mrclw ®n that is. sort S£EEi*££ESS£ 

orga nise pour faire une nouvelle raarche en avanto 

I shall stop here, it will be easy for the reader to decipher the rest 

himself " Setting aside the question of nwrfeer. it is not possible *> 

crypter to determine the value of the letters that compose the key «* c «P t a “ en 

the message has been enciphered with the Saint Cyr system. . 



mitted that they key must necessarily be a French word or make some kind of 
sens®, every message written with mixed alphabets contains 26 different keys, 
in relation to the initial alphabet of the tableau. Nothing proves better than 
this consideration how wrong Major Kasiski was to base his method of decipher¬ 
ment on the actual value of the letters of the keyword. 

In the present case the keyword is degjlwith the Saint Cyr system, and 

puluv with the tableau that will follow (page 30). ...... 

Once the number of letters in the keyword has been determined,, it being 
assumed that the message is fairly long and that some facts are known about the 
correspondents or the probable nature of the content, it is very rarely tha a 
cryptogram can not be deciphered. In rather difficult cases, it is generally 
the first two or three words that come to play the role of traitorsz now, nothing 
is easier for the decrypter than to make for himself a list of the words tha_, 
in time of war, might begin a dispatch and to classify them according to t e 
position of the E that is found in themz those which do not contain any E will 
be drawn all the more clearly to his attention. 

. --1 have de¬ 
crypted the preceding message without trying to find out whether it had been 
cryptographized according to a system that arranges its alphabets in a square 
number, or whether the correspondents had limited themselves to choosing five 
different alphabets at random. This, however, is a very important point that 
the decrypter should never neglect. In fact, once the alphabets are arranged 
in a square number, and the meaning of one cipher letter has been found m two 
or more alphabets, one can by simple addition, determine the Elsas that any 
new cipher letter whose value can be established in one alphabet occupies in 

these different alphabets. , . , . _ 

In order to present a clear account of this peculiarity, which has not 

been pointed out in any work on cryptography, let’s consider for a moment the 

tableau that served to encipher our cryptogram. , 

The arrangement of this tableau differs from thatof Vigenere only in 
the fact that the normal order of the letters has been transposed, the letters 
themselves, while never appearing twice in the same place, in r «^rd to t e 
numerical order of the vertical columns, nevertheless always follow the a* 
order in the horizontal rows (47). Thus, in each one of the latter, th_ R is 
always followed by E, and the E is always two spaces from P and five 
from L. So, once one knows the position of the R in two alphabets, the position 
of the letters E, P and L will be known in the second alphabet, since it wil 

already have been established in the fust. 

Let’s take an example* I assume that in trying to decrypt a message 
cryptographized with a keyword of three alphabets, the value of the nineteen 
cipher letters indicated below has already been found, that is, E P B - 
for the first alphabet, U A T for the second, and TDFHKMRSI C for 
the third. Since the letters of the three alphabets taken two at a time 
have one common letter, A and T, I can carry the letters of one alphabet 
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_JL 

A z 
B y 
C t 
D ¥ 
E w 
F d 
G f 
H g 
I h 


L m 
M q 
N n 
0 o 
P x 
Q r 


T p 
U u 

V b 
W 1 
X i 

Y c 
Z a 


ytvwdfghjkm 


t ¥ W i 

¥ w d 
w d f ( 
d f g 
£ g h 

g h j 
h j k 
j k i 
k m q 
ra q n 
q n o 
n o x 
o x r 
x r e 
res 
e s p 
s p u 
pub 
u b X 
b 1 1 
X i c 
i c a 
c a z 
a z y 
z y t 


g h j kraq 
h j k m q n 
j k m q n o 
k m q n o x 
m q n o x r 
q n o x r e 
n o x r e s 
o x r e s p 
x r e s p u 
r e s p u b 


e s p 
s p u 
pub 
u b 1 

b 1 i 
lie 
i c a 
c a z 
a z y 
z y t 
y t v 
t ¥ w 
v w d 
w d f 
d f g 


r e s p 
e s pu 
s p u b 
p u b X 
u b 1 i 
b X i c 
1 i c a 
i c a z 


a z y 
z y t 
y t v 
t v w 
v w d 
w d f 
d f g 
f g h 
g h j 

h j k 


r e s p ' 
e s p u 
s p u b 
p u b 1 
u b 1 i 
b 1 i c 
1 i c a 
i c a z 
c a z y 
a z y t 
z y t v 
y t ¥ w 
t v w d 
v w d £ 
w d f g 
d f g h 
£ g h j 
g h j k 
h j km 
j k m q 
k m q n 
m q n o 
l q n o x 
[ n o x r 
i o x r e 
> x r e s 


UJUL 
u b 1 
b 1 i 
lie 
i c a 
c a z 
a z y 
z y t 
y t v 
t v w 
¥ w d 
w d f 
d f g 
f g h 
g h j 
h j k 
j km 
kraq 
m q n 
. q n o 
n o x 
o x r 
i x r e 
.res 
• e s p 
i s p u 
s p u b 


i c a 
c a z 
a z y 
z y t 
y t ¥ 
t v w 
¥ w d 
w d f 
d f g 
f g h 
g k j 
k j k 
j k m 
k ra. q 
m q n 
q n o 
n o x 
o x r 
x i e 
res 
e s p 
s p u 
pub 

u b 1 
b 1 i 
X 1 c 


over to tke otker, by the simple procedure of placing them, in the three alpha¬ 
bets, at distances respectively equal to the common letter» 



If I had realized this peculiarity in the decipherment of our dispatch, 
I would ha V e been able to stop at the fifth word, the number of the letters al¬ 
ready deciphered plus that of the letters learned by symmetry of position being 
more than enough to decipher the rest of the cryptogram almost as fast as 1 

could writeo , , . , , 

It will be easy to understand this by inspection of the tableau below, 
in which the letters known through decipherment of the first five words are 
written in capitals, while those whose ¥alue is revealed by the principle of 
symmetry of position appear in lower cases 





■——- 


T 

C 

P 

F. 

F G H 'I J K 

L M N 

0 

’P_ 

'a 

JL 

£ 

X 

jf 

v.M 

X 

x 

X 

1 



<3 

h 

J 

m Q N x 

Res 

P 

u 

b 


i 

c 

a 

z 

t 

V 

w 

2.4 

E 

s 

P 

U 

B 

I c A z 

T V w 



g 

H 

j 


m 

q n 


X 

r 

3 

G 

h 

j 


M 

q N x r e 

s p u 

b 


1 

G 

A 

z 


t V 

w 



5 



c_ 


JL 

t v W 

G h J. 

— 

_M 

JSL 

n 

— 

x 

JL 

e S 

-fi. 

u 

b 


It is all the more important not to neglect this peculiarity of alpha¬ 
bets set in a square number, since there is hardly any occasion to decipher a 
cryptogram whose 26 alphabets have a random arrangement? that would be an im¬ 
practical system and for that very reason inapplicable in time of war. Because, 
if the obligation of memorizing the arrangement of a single alpnabet can some¬ 
times present certain difficulties, what would the difficulty be if it were a 
question of learning 26 different alphabets, each one arranged according to a 
plan that excluded any regularity? It would be necessary to have written notes, 
and the value or security of the system would depend solely on the prudence of 
the agent called upon to apply it. Also, all the devices of any value that 
have been invented in recent years, such as. for example, the Wheatstone cryp 
graph, are based on a regular transposition of the alphabet, and the principle 
that I have just explained is perfectly applicable to them Q 

d„ Indeterm inate alphabets ,,—If in the decipherment of a cryptogram 
using trexposed""alphabets it is impossible to determine the number of alpha¬ 
bets in the key. whether it be because the message is too short or because the 
key is too long, the solution of the problem presents difficulties, if not in 
surmountable, at least capable of trying the patience of the most able crypto- 

9 P The situation changes if one finds himself in possession of several 
cryptograms written with the same key. however short they may be; by arranging 
them one under another, one can make a calculation of the repetitions of let¬ 
ters analogous to that which we have done, page 24. on the cipher letters 

grouped in sections or by columns. . , 

Here are a dozen cryptograms, very short, wmch have been encipher 

by the preceding tableau, and with a whole phrase: *Je me mets sur la defer.- 
sive"? we shall see that the decryptment of them is quite easy. 


No. lo UHYBRJIMBCFAMMTJTDMRXQ 

2 o UHWPRBQLKIBLWREJRBKLGIXBQEXHM 

3 o IEWHCHQKQMTMVGJJEDZVA 
4. UWVRRHIKMCWWEGHDCXSRQH 

5 „ UHSHAHKSYCJWZVXJYN DMQQN 

6 o YHVHMAGQKCWXPVIHHWLZVLTHV 

7. LHVHAAGRLPFMSOHXPWZZJELQRBW 
§ a SWUIRXICJUFSHGWRSZBAAL 
9. UHWHVAGULCJWOUKDEBKQ 
10o YWXHYHBALGBVPSWIWWJRRH 
11. WQREXBIENHMVYMH3IYM 
12o SWUHDHPJJGKXGMHL 

13 0 gqvqrvotqqspwr 


Let us note in passing that of the 22 letters of which the key is com¬ 
posed. there are 3 that are repeated and that we thus have in reality only 14 
different alphabets? this is a case which it is hardly possible to avoid and of 
which the decrypter should know how to take advantage. 
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In order not to extend the demonstration beyond measure, I shall^con¬ 
cern myself with only the first two words of numbers IV, V, VI and VII; in 
addition, in order that the reader can more easily follow my reasoning I shall 
place in advance the letters of the key above the corresponding columns, 



1 

T 

2 

K 

3~ 

M 

4 

E 

5 

M 

6 

E 

7 

T 

8 

S 

9 

3 

10 

u 

etc. 

I 

u 

h 

y 

b 

r 

j 

i 

m 

b 

c 

fammt jtdmriq 

II 

u 

h 

w 

P 

r 

b 

Q 

1 

k 

i 

blwrejrb, etc 

III 

i 

e 

w 

h 

c 

h 

q 

k 

g 

m 

tmvgjjedzva 

IV 

u 

w 

V 

r 

r 

h 

i 

k 

m 

c 

wweghdcxsrqh 

V 

u 

h 

s 

h 

a 

h 

k 

s 

V 

c 

jwz, etc. 

VI 

y 

h 

V 

h 

m 

a 

g 

q 

k 

c 

wxpvi, etc. 

VII 

1 

h 

V 

h 

a 

a 

g 

r 

1 

p 

fmsohi, etc. 

VIII 

i 

s 

w 

u 

i 

r 

X 

i 

c 

j 

u 

fshgwrszbaal 

IX 

u 

h 

w 

h 

V 

a 

g 

u 

1 

c 

jwoukdebkq 

X 

y 

w 

X 

h 

y 

h 

b 

a 

1 

g 

bvpswiwwjrrh 

XI 

w 

q 

r 

e 

X 

b 

i 

e 

n 

h 

mvymhsiym 

XII 

s 

w 

u 

h 

d 

h 

P 

J 

j 

c 

kxgmhl 

XIII 

g 

q 

v 

q 

r 

V 

o 

t 

g 

q 

spwr 


In applying the calculation of repetitions, we assume the presence of 
. in colu» S 2 f= §1. 4 («H). 5 (-E). 6 (:H), 7 (= l) , 9(=L) 10(=C)» 

we see besides that, the cipher letter representing the letter e is the same 
for columns 2, 4 and 6, which permits us to conclude that these correspond to 
one and the same alphabet Columns 3 and 5, as well as columns 8 and 9, be¬ 
long equally to the same respective alphabet; but since we are supposed not to 
know the key, it is only later that we shall be able to state it; we count, 
then, provisionally, on the 10 columns, 8 different alphabets. Let s begin 
with No. IV! 

1 2 3 4 5 6 7 
No. I Vo U W V R R H I 
o o . - e e e 


We have assumed that the cipher letters RHX represent, all three of 
them, the letter e, Since no word in French can begin with two e s, we have 
here^a word ending in eej the number of letters that precede this ending in¬ 
dicate to us at once that we are in the presence of the word ^mee, preceded 
by !l° We write down then 6 letters, of which 2 are given by symmetry of 

position (48)* 

1234 5 6 7 89 
No, Vo U H S H A H K S . V 

1 © o © o © o o « 


We have just seen that U = l° D the word that follows le has an e in the 
2nd and 4th positions; this is the same case as the dispatch that we deciphered 
on page 27; it is therefore useless to go over our reasoning again, and we say 

immediately that the word is senejal. 

The decipherment of this last word gives us 10 new letters, that is, 
the 5 in the word general, S-A-KSV, plus 5 others furnished by symmetry of po¬ 
sition? the placing of S in alphabets 8 and 9 shows at the same time that 
these two columns have been enciphered with the same alphabet. 
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12 3 456789 
No. VI. YHVHMAGQK 
. e r e . v . . . 

Since the M does not correspond to an n (- A) * the first word can only 
be either fe^ez or serez S it is impossible for the moment to decide between f 
and s* but* whatever the verb may be* it must be followed by vous. We write 
down 15 new letters* of which 4 are obtained by decipherment and 11 by symmetry 
of position. 


123456789 10 
No. VIIo LHVHAAG RLP 
.erenvo.e. 

We have here'- le renvoi * ie renvoie or ne r envoyez * now* symmetry of 
position is opposed to the R of the 8th column being an ii because we would 
then have in the 3rd alphabet an R placed just two spaces from the 3* and an¬ 
other R placed 18 spaces from the S in the 8th alphabet* it is* therefore* a £* 
and we reads ne renvoyez. 

Decipherment has given us here the meaning of only 3 new letters* but 
symmetry of position informs us* in all the different alphabets together* of 46£ 
simply by placing the L in the alphabet of the 1st column* where we already 
know that U = 1* we can determine the place of 11 new letterso We see at the 
same time that columns 3 and 5 are enciphered with the same alphabet. 

The reader will not have any difficulty deciphering the rest himself* 
especially if he continues with Nos. XI and XIII. 

We conclude from what precedes that* whatever the arrangement of alpha¬ 
bets adopted* correspondents are always kept from writing each of their messages 
with a different key. 


c. Variable key system. 

The variable key systems were mentioned on page 21. A message written 
by the system indicated is hardly decipherable unless the decrypter can re¬ 
cover the indicator letter. This is not easy with a very short message^ but 
when it has four or five lines* one notices immediately a certain regularity 
in the very irregularity of the recurrences of the letter* it is the only ci¬ 
pher letter* for example* that is never found doubled. Now* once the indicator 
letter is found* the decipherment is certain! it is only a question of placing 
in columns the different groups formed by the intervals from one indicator 
letter to the next* and making the calculation that w® are acquainted with. 

A valuable fact is* besides* furnished by the Arabic number that indicates the 
place occupied by the indicator letter in the key (49). 

Decipherment can only offer some difficulties when the alphabetic order 
of the letters has been transposed irregularly* also I was able to decipher* in 
less than two hours* cryptograms composed in this system* which were sent to me 
by the Commission of military telegraphy. 


5. A triple key cipher. 


It results from our attempts at decipherment that of all the multiple 
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substitution systems of cryptography that are in use today,, "^e presents any 
serious guarantees of indecipherability. Of course, it may happen that such 
and such a message, four or five lines long, enciphered with unmixed alphabet 
and with a keyword of only five or six letters, may resist the efforts of the 
best decrypted nothing is easier, for one who knows how to decrypt, than to 
compose indecipherable cryptograms with the most common °f systems. But if 
cryptography is ever to become, as one of our best generals has said a P° w ®* 
fufa™ary of military tactics, it is necessary that the syetem adopted be 
able to defy, even when it is operated by inexperienced hands, the most labor 

ious investigations of decrypterso , , . ., -c-.n+^allv nrac- 

If it were permissible to neglect for an instant the essentially pra- 

tical side that any system of cryptography destined to the needs of the army 
Its? present in order to consider only the desideratum which demands the ex¬ 
clusion of secrecy, one could adopt a triElsJcs system, and combine a trans 
position procedure with a multiple substitution system. f'^aifCyr system, 
combined with the transposition method described on page * „* 
minimum of written notes, and would give a cryptogram, if f n °* Y 

indecipherable at .least not permitting any calculation of p,obabili-y 0 

The two keys would have to be represented by different words, ® 

an adjective and a noun? the first word, composed of a small 
would serve as key for the substitution work, and the second, of a greater 
number of letters, would give the transposition formula? for example. c_o_ 

this ° system! "Vous f , ?e soir une 

attaque simulee," taking as key senat remain and using the Vigen ere tableau. 

i rn. u 1 


f e i-a. 7 - 9 e s ° i 


e e 


fit 

nshsywvrzvwwbikmrramledu xkmzuewjL 

Remain gives for a numerical formula 6 5 3 1 2 4? we have then* 


A 



1 

2 

3 

4 

5 

6 

1 

n 

s 

"h" 

s 

y 

w 

2 

V 

r 

z 

V 

w 

w 

3 

b 

i 

k 

m 

r 

r 

4 

a 

m 

1 

e 

d 

u 

5 

X 

k 

m 

z 

u 

e 

6 

w 

i 

a 

b 

c 

d 



1 6 

5 

3 

1 

2 

4 

—w 

6 

d 

c 

a 

w 

T 

b 

5 

e 

u 

m 

X 

k 

z 

3 

r 

r 

k 

b 

i 

m 

1 

w 

y 

h 

n 

s 

s 

2 

w 

w 

z 

V 

r 

V 

4 

u 

d 

1 

a 

IT, 

e 


s dcawibeumxkzrrkbimwyhnsswwzvrvudlame» 

But „ 1 repeat,, this procedure dispenses with the need for secrecy and 
guarantees an almost complete indecipherability in vain, because it Wes too 
ZTtoX e desired from ?he practical point of view for it to be possible even 
to dream of applying it to the service of war. Also, it is only ** 

title of a curiosity that I wanted to indicate a system dispensing with the 
need for secrecy and fulfilling thus the principal desideratum of military 

cryptography,. 
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Co Cipher Dictionaries□ 

It is difficult to learn precise facts about the different systems of . 
cryptography that, since the last century, have been In use in the French army, 
nevertheless, it is known positively that, even before the Revolution the 
general staff had had compiled, for the use of secret correspondence, tables 
analogous to those which the Ministry for Foreign Affairs still uses today. 
These tables contain, alongside set phrases, a certain number of ordinary 
words! opposite them were found one or two numbers to represent them. General 
Lewal has quoted, in the J^n^de^Ssi^es_mil^im, the fragment. of a 
letter addressed, under date of 2 May, 1815, by Minister for War Davout to hi. 
colleague in foreign affairs, to ask him for two ciphers of this type for mill 

tary correspondence. These ciphers, or siEh££±£a_M>l^» « they "®* d *° b 
called have become the ci pher dictionaries that are used today in the ar y. 

As early as 1850, Brachet (51) had thought of composing for the public 
an analogous dictionary, in which each word is invariably represented by a 
five-figure number. M. Sittler (52) later compiled a small vocabulary of some 
fifty sheets, in which each page contains 100 words, represented th * 
bers from 00 to 99? the word that one wants to write is determined by adding 
to this number the number of the page. The pagination, which is left blank, 
and which must be indicated by hand, according to some agreed upon system con 
stitutes the secret of the method. The plan of the work is well enough con 
ceived! it is only the more to be regretted that the author forgot to lndio * e 
the precautions to be taken in order to assure the secrecy of the messages in 

case the dictionary fell into the hands of the enemy. , 

MM. Brunswick (53) and Galilan (54) have sought to fill this gap by 
compiling, the first named, a dictionary in which the letters with their binary 
combinations, and some thousands of words with their grammatical flexions, are 
represented by groups of numbers running from 0000 to 9999? and the second one 
by compiling an analogous dictionary, in which the groups of 4 numbers are re- 

placed by combinations of three letters (55) 0 , , .. ^ 

The method adopted by the two authors to thwart the calculations of de 
crypters is very ingenious. Here, in a few words, is the procedure of M. Brun 
swick! first of all, the figures of each group or number are transposed ae- 
"X to lome formula agreed upon, then this transposed number is increased 
or decreased by another number? this last number, together with the .ranspo 
sition formula! constitutes the key of the cipher Let s take an example. 

suppose we want to write uafifiSfl. and that the corresponding number given by 
the dictionary is 2143? this number can be transposed in 12 different ways 
?134 4321 etc.• let's choose 2X34, If the agreed upon numbei that is to be 

added is 214, the final cipher number will be 2134 plus 214 s 2348c 

Since there is great latitude in the choice of the number to be added 
or subtracted, it is impossible, as long as one does not have the dictionary, 
to establish the slightest calculation on the groups thus obtained. But once 
in possession of the dictionary, it is sufficient to know any group# in 
message in order to recover at once the key of the wheie th^ig. Sow, the 
circumstances in which a message has been written being known, it is very easy 
to recognize by the repetition# of certain groups the presence of such and 
such word. Thus, the following four groups, 4213, 6555, 6555, 2140, Pl«=«d 
at the beginning of a cryptogram, would probably contain the pronoun 
Sul or ceRepeated? it !ould be in fact difficult to compose in French the 
beginning of a sentence in which some word other than flous, X2S2 ox s£ <=<»ld 
be found repeated in the second or third position? for example. Pouvez- 



vous defendre? Devons-nous nou s retirej? Est-cc ce soir? 

It would be too long to go into all the details that can enter into the 
decipherment of a message cryptographized with a cipher dictionary; I shall 
limit myself to a single example,. 

Suppose that certain indications authorize me to believe that in an in¬ 
tercepted dispatch group 9645 means colonel „ and group 7457 regiment . Here is 
how I would proceed to recover the transposition formula as well as the key 
number□ 

Let’s assume that the dictionary gives for colonel and regiment the 
numbers 4913 and 2734; if I compare these two groups with the numbers 9645 
and 7457 of the cipher text, I see in the presence of the 9 and the 7, left 
intact and placed in first position, that the key is composed of only three 
figures, and that, in the changing of the original number, the second figure 
has been carried to the first position; in addition, the figure 6 of the first 
number indicates clearly that the key calls for an addition and not subtraction. 

The numbers 645 and 457 represent, then, the sum of the key number in¬ 
creased by the number produced through the changing of 413 and 234, Now, if 
I subtract successively from the first two numbers the six changes obtained, 

I shall have for the two operations a common difference , which will represent 
the agreed upon number, at the same time as it makes known what the transpo¬ 
sition formula was. 


645 - 


/413 = 232 
( 431 s 214 
) 143 = 502 
\134 = 511 
J 341 = 304 
(314 = 331 


457 - 


/234 = 223 

( 243 = ZH 
423 s 034 
432 as 025 
324 s 133 
342 = 115 


I conclude that 214 is the key number, and bade the transposition 
formula. 

The operation cannot give any common difference unless the groups of 
the cipher text really correspond to the supposed words. 

Of all the known methods of cryptography, it is certainly the cipher 
dictionaries, at least those that are based on a double principle of composi¬ 
tion, like those of Brunswick, Gallian and Niethe, that guarantee best the 
secrecy of the correspondence. But, along with this real advantage, they pre¬ 
sent such great disadvantages in their application to correspondence in time 
of war, that one cannot help being astonished at the favor they have enjoyed 
up to now among certain army chiefs. 

The greatest complaint that can be made against cipher dictionaries is 
that they require secrecy, and that they constitute, by the very fact of their 
adoption, an obstacle to the widespread use of crytographic correspondence 0 
This condition of secrecy can moreover cause the greatest embarrassment. 

It is reported that, on January 8, 1871, a cryptogram was sent from the 
general headquarters of the King of Prussia to General de Werder, who could 
not decipher it immediately, because the dictionary containing the key of the 
secret correspondence was locked up in a valise placed in a carriage that 
had been driven away.. 

During the Russo-Turkish war, Selim Pasha, political sub-chief of 
Mehemet Ali, absented himself for a few days in September, 1877, and carried 
off inadvertently the deciphering book. During that time, the general-in-chief 
received a great number of enciphered dispatches that he was unable to read. 



But , besides the fact that a printed vocabulary can be purchased by 
the enemy,, and the fact that the adoption of a dictionary must necessarily 
restrict secret correspondence, there are the greatest disadvantages in 
making the meaning of a word or an entire sentence depend on the correct 
transcription of a number2 let a single figure in a group be wrong, let a 
telegraphist or copyist put, for example, a 3 where a 5 should be, and the 
meaning can be completely changed. Generally there is only a simple miscon¬ 
struction, or an incomprehensible phrase^ but the error can have most unfor¬ 
tunate consequences, and it has happened more than once that a badly trans¬ 
mitted or wrongly read cipher has distorted completely the meaning of an 
order or of an item of information., If it is not rare to see persons used 
to handling ciphers make, in an excited moment, errors in simple addition, 
nothing is more common than to see telegraph employees make mistakes in the 
transmission of cipher groups. This drawback, which was strongly felt during 
the war of 1870, in which half the dispatches sent by the military authority 
to the prefects contained illegible parts, was again encountered several 
times during our campaign in Tunisia^ more than once it was impossible, in 
the Ministry for War, to decipher the dispatches from the army in Africa., 

Not very long ago, the Italian ministry was singularly intrigued by 
the news that its ambassador in Sto Petersburg sent it- that Count Andrassy 
was expected in the Russian capital.. It was all simply a cipher error, 
which had caused the name of an embassy attache to be taken for that of the 
celebrated statesman. 

Cipher dictionaries are really of practical and safe use only for the 
chancelleries, whose personnel, with their papers and their baggage, are in¬ 
violable in all civilized countries, and who have their dispatches enciphered 
and deciphered by employees experienced in this type of work and having the 
means of verifying, at their ease, the faithful transmission of correspondence. 


IV. 


CRYPTOGRAPHIC DEVICES. 

If the few examples of decipherment that precede have stressed the 
weak side of our principal systems of secret correspondence, they likewise 
permit us to appreciate the difficulties presented by the construction of a 
cryptographic process that fulfills the desideratum that I have indicated as 
the basis of every method of military cryptography, that is, the non-necessity 
for secrecy. 

We have seen that it is impossible to replace sentences and words With 
groups of letters or numbers without creating by that very act. a dictionary 
that demands secrecy^ we also know that transposition procedures guarantee 
indecipherability only on condition that they be based upon some secret appa¬ 
ratus? it follows, and I insist on this point, that a method that is both 
safe and practical can only be established with an arbitrary substitution 
of letters. It is true that, if the system is simple and rests upon some 
regular process or some systematic combination, it necessarily exposes its 
flank to the calculations of decrypters? if, on the other hand, it is al all 
complicated and calls for numerous combinations, then it demands secrecy or 
it ceases to be practical. 

But I believe that the solution of the problem must be sought in the 
application of some mechanical apparatus, based on the principle of substi- 
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tution, that is to say, in the employment of a cy^£tog£a£h° 

This idea, moreover, is not newo 

The Lacedemonian scytale, the planchette of Aeneas (pierced with twenty- 
four holes representing the letters of the alphabet, holes through which a 
thread was passed to indicate the order of succession of the letters of the 
secret missive), Kessler’s drum, were true cryptographs., 

The first model of a cryptograph worthy of the name is found in the 
Traite dcs Chiffres by Porta? it is the dial system of which I have already 

had occasion to speak. ,,,,,, 

Father Kircher had also invented a mechanical apparatus that he had 
called Area alottotactiga (56)$ it was a kind of movable catalogue in which 
the words were classed in a certain order corresponding to the different 
letters of the alphabet., The aerial telegraph of Chappe, like the Morse 

telegraph, are other true cryptographs. ^ 

In recent times, cryptographic devices have been invented by MM. 
Mouilleron, Vinay and Gaussin, Rondepierre, Wheatstone, Silas and others. 

Mo Mouilleron’s system, the description of which is found in the 
Expose des applications deselecttifiiifi of Du Moncel (57), is a mechanism 
i^^dTTa desk, quite complicated and not presenting any practical advan¬ 
tage. The author does not seem to have made a very deep study of double 
key ciphers, because his voluminous mechanism only ends by giving us a cryp¬ 
togram enciphered by the Vigenere tableau. It is easy to confirm the per¬ 
fect exactitude of what I claim by cryptographsing the example that the 
author gives. La ^ictoire est a £2U§, with our tableau on page 16$ with the 
key kzirh, one will obtain the same cryptogram as that which is given by M. 
Mouilleron’s apparatus, with the key paris (58), thus? 


1 a v i c t-oi r eesta n _o_u_s_ 
K Z T tThK Z iTh K Z I R H K_ Z_I. 

vzdzjdnqilorbrnyta 

s vzdzjdnqilorbrnyta 


The cryptograph of MM. Vinay and Gaussin is a printing mechanism by 
means of which the dispatches are printed and cryptographized at the same 
time„ While more portable than the preceding one, it is still too volumi 
nous for its use to be possible in time of war? from the strictly crypto¬ 
graphic point of view, it has, furthermore, no value at all (59). 

The cryptograph or phyrogr.aph of M. Rondepierre is based on the trans¬ 
position system that has been explained on page 8. The vertical columns 
are represented by ivory rods on which are traced divisions destined to re¬ 
ceive one letter? they are first transposed according to a numerical formula 
then the message is written in pencil on the rods themselves. These are 
then returned to their original place, and the letters are copied in the 
new order in which they appear. The system is, from a certain point of view 
quite practical, but it offers only a relative security (60). 

I shall say nothing of the cryptograph of M. Silas, former attache of 
the French embassy in Vienna? although it is a serious and very well con¬ 
structed work, it is too complicated, in my opinion, for war use. 

Of all the cryptographs that have been invented in recent years, that 
of Wheatstone seems to me to be, if not the safest, at least the simplest. 
Since I have not been able to obtain a copy of the apparatus, I borrow my 
description of it from the Report of the Military Commission on the Univer¬ 
sal Exposition of 1867 (6l )• 



The very simple instrument proposed by Mo Wheatstone for writing 
messages in cipher is easy to use* says the reporter* and as sures the 
most absolute secrecy (?) for those who do not have the key of the sys¬ 
tem.. 

Here is the principle on which the cipher alphabet is formed* Any 
word is chosen to serve as keyword* France * exposition* E&ojegtile* etc.. 
Let’s suppose that the word projectile is selected? the word is written 
down spacing the letters that compose it* and underneath are written the 
letters of the alphabet that it does not contain* in regular order* as 
follows t 

projectile 
abdfghkmnq 
s u v x y z w 

By taking the letters in the order in which they appear in the suc¬ 
cessive vertical columns* the alphabet following is obtained? 

pasrbuodvjfxegychztkwimlng 



The letters of the cipher alphabet are written on a circular piece of 
cardboard* This circle is placed concentrically on a metal dial* which 
bears on its circumference an ordinary alphabet* completed by the stop- 
sign ^ g to which one returns at the end of each word* but which does 
not appear in the cipher Two hands* 1 and 2* move simultaneously 
around this double dial* but at different speeds and in such a way that 
on moving the first hand to the letter B again* the second one will not 
come back to the same letter* such as V* indicated in the diagram* but 

to a different letter on the inner dialo 

When one wishes to translate a given letter into cipher language* one 
moves the large hand to the place occupied by this letter in the normal al¬ 
phabet* and marks down the letter on which the small hand has stopped in the 
cipher alphabet* The system thus has two keys? the arrangement of the cryp¬ 
tographic alphabet and the starting point* 

Whatever Colonel Laussedat* the author of the report I have just 
quoted* may think of it* messages written with the Wheatstone cryptograph 
are perfectly decipherable. 

The system gives only a very limited number of different alphabets* 
the same alphabetical arrangement recurs after a certain number of stops. 
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Let’s suppose that this happens after the 26th or 3>0th letter? I then only 
have to consider the cryptogram to be deciphered as being written with a 
key of 26 or 30 alphabets and to put it into columns in series of 26 or 30 
cipher letters , as we did for the message on page 26» But the greatest 
disadvantage that the apparatus presents is that it demands absolute secre¬ 
cy? for once fallen into the hands of the enemy, it is enough to make a 
few assumptions on the first letters of the message to recover the starting 
pointo 

When several messages, written with the same key, have been inter¬ 
cepted, it is not necessary to possess the apparatus in order to make the 
deciphermento One applies the procedure that I have indicated on page 32c 

There has just been presented to the Commission on military tele¬ 
graphy a new system of cryptography, which seems to me to fulfill all the 
desiderata that I explained at the beginning: complete indecipherability, 
simplicity, non-necessity for secrecy? highly important considerations 
prevent me from saying any more about it for the momenta 

Without wishing to prejudice the reception that this new proposal 
may get from competent judges, 1 must, in conclusion, insist on this point, 
that the value of a system of cryptography destined to the needs of war is 
in inverse ratio to the secrecy that its operation or composition requires a 
It will depend, then, on the Administration to assure the future of military 
cryptography, by accepting only the invention that rests upon the principle 
that du Carlet ,, one of the masters of our art in the XVIIth century, had 
inscribed as a motto at the head of his method, a principle that summarizes, 
moreover, my whole thesis, that is, that a cipher is good only as long as 
it remains indecipherable even by the master who invented its £jrs jjo gi 
seereta fflagistro (62)« 
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NOTES TO SECTION 1. 


(1) Under the term steganograp hy, £l£he£s, or St__HI±LLll2/ certain en¬ 

cyclopedic dictionaries give the facts pertaining to cryptography. An¬ 
cient writers call it more or less correctly** axs_j^ta£um, ars__ ? ,y p h e r- 
aI um, p olyg raphia, scotographia, grYptolggia, steganolg<gia, cj-^tgmeny- 
tl oes , etc.J the Germans say today Gehe jmschrlft or C h j, f f £C.§ehriXt» an<a 
the English, cryptography * 

(2) Letters placed between the shoe soles of the messenger, communications 
hidden in a wound of the carrier, or in women’ s earrings, pierced with 
24 holes through which a thread passes, carrier pigeons, etc. Aeneas 
(4th century B. C.) is the most ancient of the military authors whose 
writings we have** chapter XXXI of his ^mmentajj^s^ 

places (translated by Field Marshal Beausobre, 1757) is devoted to en- 

iiEheLS^ Jitters ^nd_the_w3y^g_^n^^em_se£i^.tly. 

(3) The invention of Kessler, which Colonel Laussedat recalled in one of 
his lectures, is explained in a little book that has become very rare, 
published in 1616 in Oppenheim and entitled: Unte|:sclue. de . ne ._ b isshe^e 
rnphrprn-Thepls^secreta o der Ve.rb oroene geheJjne_Kungte. 

(4) ftoma n History . Bk. X, chap. 44-48. 

(5) Lysander, chap. 19. 

(6) Chap- XL, 9> chap. XLI, 3. 

(7) Caesax , chap- 56* Octavian , chap- 88. 

(8) ftt tic Night s. Bk- XVIII, chap- 9- 

(10) "^What^ne finds in the £gs£es, a work on military art attributed to 
Julius Africanus, and of which a French translation was given m the 

M^mgires_critigues_.et_histgrigues_d§_Guischardt, is hardly more than 

a copy of Aeneas’ s C omment a ir e §..—Philon of Byzantium, the author of 
the Pojl orc&tigue . who lived in the 2nd century B. C-, had composed an 
entire treatise on the Sen d ingo t _s ec£.e t _le tierg., but this work has 
been lost. 

(11) Gaspari Schotti, Scholarste^anggraEkiS^/ 1665 > classis viii. 

(12) Gustavi Seleni, Crxp^menytices_.ei_ci:ygtggrg£hiae, libn IX, LbZ*. 

(13) See: Cgmmentajres sur Ia_de fen se_d,es_pl aces, p. 145 , . translator s note. 

(14) One finds the following precept in the Bgeyi§xiyiL^iiti^LHIS ^ x ~ 

dinal Mazarin: "Scribere seareta manu tua no graveris, nisi per zifras 

scribas." 

(15) Cf. Bardin, DicUgnnagre_de_i_Arme|_^e, , te£ X | ,^ 1843 . 


b uch der^Kryptographie ) even attributes to him, but wrongly, the inv 

tion of a new cipher. 

Ta ctioue de marche , 1876- 

See the article Chiffxe^stiganograghigue. 

Captain Henri Berthaut, to whom I allude, is certainly one of the mo 
capable decrypters on the general staff. 

Volume III, p- 76. , , 

Dicti on naire philosophigue , article Posts- It is guite curious to see 
Count Clarendon ~ in a letter written a hundred years before to Doctor 
John Berwick, express himself in analogous terms with regard to decipher 
rers: "I have heard of many of the pretenders of that skill, and have 
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spoken with some of them, but have found them all to be mountebanks. 11 ' 

Le Contr ’e_sp.ion,_ ou le s c lefs de touts 5 l e s correspondence ferrates., 

NOTES TO SECTION 3. 

I intend to publish soon a complete work on the different systems of 
cryptography; I shall be grateful for any new method that anyone cares 
to communicate to me, provided that it has some value from a practical 
point of view. 

See Kluber, Kryptographik . chap. XIII 5 Du Moncel, Expose des applications 
de Idelecriclte . Ill, p. 530 

Since the sum of the letters in plaintext must form a multiple of the 
number of horizontal rows, one adds, if there are spaces left, the neces¬ 
sary number of nulls to fill the final row; five are needed here. 

A device .invented by an architect of Paris, M„ Rondepierre, and to which 
he has given the name of Phyrograph e„ is constructed on this principle. 

'Eiis is a very serious fault on the part of the one who invented the 
system. 

I suppose that if the same letter is repeated, one counts the repetitions 
as so many more letters following in alphabetical order. For examples 
Taganrog « aaggnort - 81 32 5764 
12345678 

This process seems to have been invented in the 16th century by the 
Italian mathematician Jerome Cardan. See his book De subtilitate . trans¬ 
lated into French by Richard Leblanc, De la subtillte et subtiles inven ¬ 
tions „ Paris, 1556. ■—See also De Prasse, De Reticulis cryptographicis . 
Leipzig, 1799o 

Handbuch der Kryptographi e, by Fleissner von Wostrowitz, Vienna, 1881. 

Suetonius, Octavian, chap. 88; Isidore, Or-ig .«, I, 24• 

Suetonius, Caesar , chap. 56 § Aulus Gellius, Attic Nights , Bk. XVII, 
chap. 9» 

In the Bible are found similar examples of substitutions the prophet 
Jeremiah (chap. XXV, 26) writes, for example, Sheshash instead of Babel, 
replacing thus the two consonants b, 1 by the letters sh and ch, which 
occupy the same position in the Hebrew alphabet, when one counts them 
from right to left. 

Polygraphiae .1.1 bri VI ; composed, according to the preface, in 1508. A 
translation of it was made by Gabriel de Collanges La Polygraphie et 
universelle escriture caballstique de Jean Trithem e,, Paris, 156.1. 

Several works of cryptography or steganography have been published 
under the name of abbot Tr.ithe.im (1462-1516), without anyone being able 
to tell exactly how much in them .is really from him (Cf. Schott, Schoia 
steganographica , VII). I do not believe anything e,lse should be attri¬ 
buted to him except the invention of a system of secret writing in which 
the letters are - replaced by words chosen so as to form, when they are 
joined together, a missive or a prayer, under the appearance of which it 
is impossible to suspect the existence of a secret message (imitated in 
the Cryptographie of Du Carlet, 1644) • He thereby realized the great 
dream of his time, the modus sine secreti suspicione scribendl . I do not 
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see therefore by what right the Germans and others have proclaimed him 
the father of modern cryptography., It seems to me that this title can- 
only belong to Porta (1540-1615) s the inventor of the first double key 
literal system,, and I believe I render unto Caesar that which belongs 
to Caesar in associating with the name of the Italian physician that of 
a French diplomat, Blaise de Vigenere (1523-1596), who was the first to 
explain, in his Traite des chi.ffres 0 the operation of the square cipher ,, 
as it has been used for three centuries. 

(13) De furtivis litterarum notis. vulgo de ziferis . Naples, 1563- 

(14) Traicte des chiffresT oii secretes manieres d^scrire . Paris, 1586, 

(15) See Kluber, Kryptographik , p. 122. 

(16) Memoire of Beguelin, Academy of Sciences and Belles-Lettres of Berlin, 
vol. XIV, p. 369 - 

(17) See Kluber, loc.cit ,. p. 79. 

(18) Besides the authors already cited, one may also consults Hanedi, Ste - 
ganologia et stenographia nova (German text), Nuremberg, l6l7l Seleni, 
Cryptomenyti.ees et cryptographiae llbri IX , 1624s Frederic!, Gryptogra - 
phia Oder Geheime correspondentz , Leipzig, 1685s the article "Cypher" 
in the Encyclopedia of Rees, 1819? the article "Cryptography" in the 
Encyclopedia Britanniea o• .1877 % Lacroix, La Cryptogra ph ies ou 1 *Art d ? e- 
crlre en chiffres . Paris, 1858 0 

(19) Since we already have the terms cryptography ,, cryptographic , c ryptogram , 
and cryptograph , it should be permissible to complete the series of com¬ 
pounds with the adoption of the verb to cryptograph!ze . 

(20) The letters that occur most often in German are, in order of their fre¬ 
quency? E, N, i, r, s, t, u, a, h. In English, they ares E, T, a, o, 
n, i, r, s, h, d, 1 • 

(21) The first treatise on cryptography in which the principles of decrypt- 
ment are mentioned is due to Porta; it is the book that I have mentioned 
above: De furtivis litterarum notis . 

The principal works that have treated the same subject are, in chrono¬ 
logical order: L 1 Interpretation des chiffres . taken from the Italian of 
Cospi, by Fo I. F. N. P. M. (Father Niceron), Paris, I 64 I 5 Gravezande. 
Introduction A la philosophie s Leyden, 1737, chap. XXXV (This chapter has 
often been reproduced, and can be found, among others, in the Dicti on nair-e 
encyclopedique of Diderot and in the Crvptographie of Lacroix); Breit- 
haupt, Ars decifratoria sive occultas scripturas solvend! et legend! scien - 
tia, Helmstadt, 1737; John Davys, An Essay on the art of de cyphering ,, 1737 
Conrad, Cryptographia denudata,, sj.ve ars decifera hdi > Leyden, 17395 Thicke 
nesse, A treatise on the art of dec ypherin g, 17725 Kluber, ^ Kryptographik , 
Tubingen, 1809; Vesin de Romanini, La Cryptographle deuoil ee, Paris,, 1857; 
Kasiski, Die Geheimschriften and die Dechiffrirkunst Berlin; 1863s Fleis 
ner von Wostrowitz, Handbuch der Kryptogr aphle 9 Vienna, 1881. One can 
also read to advantage chap. XV of the S carabee d*or« the Escritur.gs_.se- 

cretes devoilees . by Charles Joliet., as well as an excellent article by 
Prodhomme in the Dictionnaire des connaissauces humaines by Lunel. 

(22) Tactique des renseignements , p. 76. 

(23) Since the telegraph administration counts secret messages by groups of 
five, breaking up into pentagrams is preferable. 

(24) There is every probability that the Minister of Posts and Telegraph will 
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not delay in applying to domestic service the principles of the inter¬ 
national convention of London, according to the terms of which the 
simultaneous use of letters and numbers is excluded from secret language. 

1 sav literal, that is, based on the use of letters, because Tritheim 
had already thought, fifty years before, of employing series of words 
and phrases to correspond to the letters of the plaintext. 

De furtlvis litterarum notis . bk. XI, chap. 16. 

M. Fleissner attributes the invention of this system to Napoleon I; 
this is not the only historical or bibliographical error with which the 
Austrian writer is to be reproached. 

So6 p# 5^3 t o \ "1 j 

Father Kircher ( PQj-JPJ_aphia nova et . universalis; Rome s lobj) replaced 

the letters of the Vigenere tableau with numbers, whence the name 
Abacus numerails given to his system. Only* instead of writing the 
cryptographic text in the ordinary way* Kircher takes any page of 
writing and indicates the numbers of the cryptogram by dots placed^under 
the letters, at intervals corresponding to the value of the numbers 
obtained. Schott commented on Father Kircher"s system in his Schola 
sten ographica s because of this, many authors, Larousse among others, 
have attributed the invention of it to him. .. 

A description of this system is also found in Bartels, LeitXMeG_l]l£ 
d en Unterricht auf den koni^lichenJ^ ej^ sc hulp n ; Berlin, 1881.. 

A Berlin firm (Egert7 62 Kochstrasse) has manufactured a mechanical 
apparatus for cryptographizing with this system. 

We shall see further on that if the correspondents followed this re¬ 
commendation to the letter, it would require scarcely half an hour to 
decipher without a .key any cryptographic message using this system. 

When the alphabet is "reversed’ 1 (see further on), the St. Cyr system 

gives a different text. . _ 

Cf. Colorni, Scotographia. overo Scienza_^ _3criyer e os e uro, Prague, 

1593. 

It is probable that the English admiral himself never believed in the 
possibility of transforming his system into an ordinary square cipher; 
one cannot explain, otherwise, why Mr. Morris Beaufort s.xll claims 
energetically at this moment, for his illustrious father, the honor of 
having presented his country with an indecipherable cryptographic sys¬ 
tem ( (Vyptographv. a system of secret_ writin£,s By th^l^t^dmiral^oir 

Franci s Beaufort ). „ , . n . 

~ Yes~ systlmestelegraphiaue s aeriens ^_ e±ectrig}^^ f arls 

1876. P. 261. , . ^ r. 

In a lecture given in 1873 in the Societe des Sciences militaires ol 
Vienna, Dr. Orges maintained that this.cipher had been invented by 


General Trochu (see Fleissner, loc. cit., p. 1 )) 

Die Geheimschriften und die Dechif frlrjmn st. . 

Colonel Fleissner ( Handbuch der K ryplggraEhie) had adopted, without 
any modification. Major Kasiski's method of decryptment. 

I quote from the translation of Pere Niceron. 

By crypt ographizing this sentence with a key of 3 alphabets, one would 
have 9 repetitions; with 4, 5, 6, and 12 alphabets, one would have 8; 
one would have only 3 with 13 alphabets, and one would have none with 
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a key of 11, 14 or 18 alphabets. 

I do not need to point out that it may very well happen that two simi¬ 
lar bigrams (with a trigram it is quite rare) may be produced by two 
different groups of letters. 

(43) A German author, Krohn ( Buchstaben- und Zahlensysteme fur die Chiffrirung 
von Telegrammen , Berlin, 1873 ) 9 did not have a clear idea of this prin¬ 
ciple, and he composed, for use in cryptographic correspondence, a dic¬ 
tionary containing 3,200 alphabets; it is, at the same time, too much 
and too little. 

(44) Since the first alphabet in the Gronsfeld system is represented by zero, 
it is necessary to decrease the order number of each alphabet by one. 

(45) Wien the decrypter knows that a text in a foreign language has been 
cryptographized in this way, he does not have to worry, for the success 
of his work, about whether he understands the language or not; it is 
enough for him to learn what letter in that language appears most fre¬ 
quently (see p.12 ). 

(46) M. Auriol ( Manuel de la correspondence secrete, postale ou telegraphique , 
Paris, 1867) has published a tableau that permits enciphering the plain¬ 
text letters two at a time. Leaving aside the fact that one can perform 
on combinations of letters the same calculation as on letters taken singly, 
the system leaves itself too open to tentative assumptions, and moreover 
requires absolute secrecy. 

(47) It matters little, and this is an essential point to be noted, that the 
order of succession of the letters in the vertical columns should be the 
same as in the horizontal rows; this order is generally only observed in 
order to permit the correspondents to establish their tableau from memory 
more easily. 

(48) The reader will not grasp well what is said here about the application 
of the principle of symmetry of position unless he sets up for himself 
on a sheet of paper a tableau with the normal alphabet at the head, 
leaving blank spaces for eight alphabets (l, (2, 4* 6), 3s 5 S 7> 83 9 S 
10), spaces that he will fill as we proceed. 

(49) In case of unforeseen difficulties, one tries out each of the 26 letters 
of the alphabet. 

(50) The simultaneous employment of the two cryptographic procedures will 
not excuse the correspondents from changing the key for each message. 

(51) Dictionnaire chiffre. Nouveau systeme de correspondance occulte . Paris, 

1850. 

(52) Dictionnaire abreviatif chiffre , Paris, 1868. ^ t 

(53) Dictionnaire pour la correspondance telegraphique secrete , par un secre- 
taire de legation, Paris, 1868. 

(54) Dictionnaire telegraphique economique et sec ret, par Marnert-Gallian, 

Paris, 1874. 

On the same principle are based the German dictionaries of Niethe (Ber¬ 
lin, 1877) and Walter (Winterthur, 1877), as well as that of Bolton for 

English correspondence. 

M. Louis, a director of the Journal des Postes , has likewise published 
a Dictionnaire pour la correspondance secrete , containing more than 
20,000 words. 

(55) In the category of cipher dictionaries is placed the system that con- 
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sists of replacing the most important words of the correspondence by 
other words, whose usual meaning is ignored- This procedure has been 
used quite often,, but it is practical only in exceptional circumstances- 
In the correspondence relating to the plot organized in 1831 by the 
Bonapartist party is found a piece,, written in the hand of Prince 
Louis-Napoleon, which contains a list of code words used by the con¬ 
spirators to designate the persons or things that had to be referred 
to most often: Queen Hortense was designated by M, Antoine - Prince 
Louis-Napoleon by Mme- Charles , England by Mme. Lirson , the Bonapartists 
by Mme. Gock . the army by Mile. Amelie . the police by M„ Pamberg . etc. 
(See Memoire5 de Gisquet 0 former prefect of police? 1840, p. 351). 

(36) See Schott, Schola steganographica . p. 27- 

(57) 3rd edition, vol. Ill, p. 529* 

(58) Kzirh is nothing else but Paris , written with the alphabet reversed. 

(59) See Du Moncel, loc. cit . 

(60) For private reasons, the apparatus has not been able to be put on sale, 
but one can see copies of it in the shop of M. Luard, sheath-maker, 1,6 
Dauphine St. 

(61) Cf. Bontemps, Les systemes telegraphiques . p. 257; Du Moncel, Expose 
des applications de 1 ’elecricite bk. Ill, p. 532. 

Wheatstone deciphered, in 1858, several very interesting letters of 
Charles I, entirely written in Arabic numbers (See Report of the Royal 
Commission on Historical Manuscripts . 1870). 

(62) La cryptographie. contenant une tres subtile maniere d'escrire secre - 
tement . composee par maistre Jean Robert du Carlet? 1644* 



